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NOTE: 


This equipment has been tested and found to comply with the limits for a Class A digital 
device, pursuant to Part 15 of the FCC rules. These limits are designed to provide 
reasonable protection against harmful interference when the equipment is operated in a 
commercial environment. This equipment generates, uses, and can radiate radio frequency 
energy and, if not installed and used in accordance with the instruction manual, may cause 
harmful interference to radio communications. Operation of this equipment in a residential 
area is likely to cause harmful interference in which case the user will be required to 
correct the interference at his own expense. 


JACK ARRANGEMENTS: Use an RJ48C 8-pin modular telephone jack to connect to the 
network. 

V.32bis modem: Use an RJ11C 8-pin modular telephone jack to connect to DDD lines. 


The wall-mounted transformer (included with the unit) must be used with standalone (desktop) 
Routermate to assure reliability and compliance to the FCC and Underwriters' Laboratories 
requirements (as well as Canadian Department of Communications standards, when applicable). 






Osicom Technologies, Inc. 

9020 Junction Drive 
Annapolis Junction, Maryland 20701 
Phone: 800-359-7710 
Local: 301-317-7710 
Fax: 301-317-7220 
Customer Service: 800-359-2273 
Repair: 301-317-7400 

World-Wide Web: www.osicom.com 
E-mail, product offerings: info@osicom.com 
E-mail, technical assistance: support@osicom.com 

NOTICE 

Information in this document is subject to change without notice and does not represent a 
commitment on the part of Osicom Technologies, Inc. No part of this manual may be 
reproduced or transmitted in any form or by any means, electronic or mechanical, including 
photocopying and recording, for any purpose, without the express written permission of 
Osicom Technologies, Inc. Neither manufacturer nor seller shall be liable for any damage, loss, 
or injury, direct or consequential, arising from the inability to use or incorrect use of this 

product. 

Warning: Changes or modifications to this unit not expressly approved by the party 
responsible for compliance could void the user's authority to operate the equipment. 

© Osicom Technologies, Inc. 1997. All rights reserved. 

The Osicom logo is a registered trademark of Osicom Technologies, Inc. 

All other trademarks belong to their respective owners. 
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OVERVIEW 


Start of Document 


• 1.1 Features 
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Executive Router 

Product - ROUTERmate-EX Executive Router 

Description - a multi-protocol router and bridge with a single synchronous serial interface that 
can be configured as RS-232, RS-530, V.35, or X.21. 

Function - connects lOBaseT Ethernet Local Area Networks (LANs) across a Wide Area 
Network at up to E-l rates (via an external CSU/DSU). 

Design - the router engine, main processor, flash memory, and LAN & WAN interfaces are on 
the main circuit board. Encryption and V.32 modem options are on separate daughter cards. 


Definitions 

Bridge - Operates at the Data Link Level; it extends a network. That is, a bridge connects 
segments of the same network. 

Router - Operates at the Network Level; it connects different networks. 


LAN 1 


LAN 2 
Segment 1 


LAN 2 
Segment 2 



BRIDGE connects 2 segments of the same network 


ROUTER connects 2 different networks 


Router and Bridge Applications 
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1.1 Features 

Management (See figure below) 

• VT100 - direct access of the router's management screens through a terminal connected to the 
front-panel CONSOLE interface. 

• Telnet - access of the router's management screens from any PC or ASCII terminal on the 
network using Telnet protocol. The Telnet Server parameter on the Management screen 
defaults to Enabled. 

• SNMP - access the router's SNMP agent using Simple Network Management Protocol. 

• Dial-In Management - an optional internal V.32 modem provides remote dial access of the 
router's management screens over DDD lines. This feature provides a backup management 
path when the primary path fails. The modem is answer-only. 

Data Rate - 30 speeds (up to 1.920 Mbps) in multiples of 64 kbps. 

Front Panel LED Indicators - eight LEDs indicate the operational status of interfaces and tests. 

Interfaces - 

• LAN (lOBaseT) - 8-pin modular interface connects router to lOBase-T Ethernet Local Area 
Network. 

• WAN 1 - DB25 synchronous interface (configurable for RS-232, RS-530, V.35, or X.21) 
provides the router with a Point-to-Point (PPP) or Frame Relay connection to a full or 
fractional T-lor E-l facility. 

• WAN 2 (optional) - 8-pin modular interface for internal V.32 modem; connects router to dial 
lines for remote access of the router's management screens. See Modem Configuration . 


SNMP Management Station SNMP Management Station 
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Data Encryption - optional encryption hardware provides encryption over PPP and Frame Relay 
links at speeds up to 1920 kbps. 

Encryption is available in standard DES or proprietary E-DES (export) versions. 

An additional optional encryption feature lets the user configure the initial vector, which is the 
initial number used to determine how encrypted data is synchronized with the decrypted data, and 
the master key, which is a number that determines the contents of the encrypted key. Call an 
Osicom sales representative at 1-888-674-2668 or 1-800-367-2729 for ordering information. 

The encryption method is based on the Data Encryption Standard (DES) of the National Institute 
for Standards and Technology. 


Bridging - protocols other than IP and IPX can be bridged on both the LAN and WAN interfaces 
(spanning tree bridging is not supported). 


WAN Protocols 
PPP 

Frame Relay 

RFC 1490 and Cisco encapsulation 
Inverse ARP 


Configuration - configuration is simple because routing is divided into link services (LAN and 
WAN) and network services (IP, IPX, and bridging). Separate interface and port 
configuration screens allow for greater flexibility in configuring links. 


Routing Services - the router routes the Internet Protocol (IP) and the Internetwork Packet 
exchange (IPX) protocol. 


IP includes: 

• Transfer Control Protocol (TCP) 

• Routing Information Protocol (RIP) 

• Address Resolution Protocol (ARP) 

• Bootstrap Protocol (BootP) 

• Learned or static routes 


IPX frames are encapsulated into frame types supported by Novell servers (Type II, 802.3, 802.2, 
and SNAP). 


IPX includes: 

• Service Advertising Protocol (SAP) 

• Routing Information Protocol (RIP) 

• IPXWAN parameter negotiation 
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System Architecture (see figure) 


• 4 software elements: 

Network Layer Services 
LAN Services 
WAN Services 
Management 

• 1 hardware element: LAN and WAN 
interfaces. 



Network Layer Services 

IP, IPX Routing and Bridging 


Port 0 

Port 1 

Ports 1-14 

Management 

Ethernet 

PPP 

Frame Relay 


LAN 

WAN 


Interface 

Interface 


System Architecture 


Each service is embedded and knows only the interfaces to service providers (lower layers), 
service users (higher layers), and management. This design allows flexibility since services at any 
layer can be enabled, reconfigured, or disabled without affecting the other services. 


When using Frame Relay protocol, the router supports up to 15 logical ports (1 for LAN and 
14 for WAN 1). 


Software and Configuration 

• the operating system and parameter configuration are stored on an internal flashPROM 

• software and configuration uploads and downloads using TFTP 

• BootP supported for software downloads 
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INSTALLATION 


Start of Document 


• 2.1 Installation Checklist 

• 2.2 Jumper Settings for WAN 1 Interface 

• 2.3 LEDs 

• 2.4 Interfaces and Cables 

• 2.5 Management 

□ 2.5.1 Passwords 

□ 2.5.2 Terminal Management 

□ 2.5.3 Telnet/SNMP Management 

□ 2.5.4 Dial-In Management 

• 2.6 Quick Start Procedure 

• 2.7 Obtaining the Enterprise MIB 


This section provides information on initial installation, configuration, and start-up procedures for 
your router. 


The following topics are covered: 

• configuration of jumpers for the WAN 1 interface 

• router's LED indicators and interfaces 

• terminal, SNMP, and Telnet management 

• dial-in management 

• connection of the router to the LAN and WAN 

• quick start procedure; configure the router for most applications 


For new installations, see the Quick Start Procedure . 

















2.1 Installation Checklist 

Before you begin installation: 

1. Upon arrival of the equipment, inspect the condition of the received cartons and compare all 
items to the packing list attached to the carton. 

2. Notify both Osicom Technologies' Customer Service Department (1-800-359-2273) and the 
transportation carrier immediately if there are any damages or shortages. 

3. Save the cartons and foam inserts in case the unit must be shipped at a later date. 

4. The WAN 1 interface is pre-configured according to the specific model ordered (RS-232, 
RS-530, V.35, or X,21). If your application requires a different interface, see Jumper Settings 
for WAN 1 Interface . See Interfaces and Cables for interface and cable pinouts. 
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2.2 Jumper Settings for WAN 1 Interface 


NOTE 

The jumpers are pre-configured according to the specific model ordered. 


If your application requires a different WAN 1 interface to connect to the DCE, access the 
jumpers and set them as described below. 



1. Remove 2 screws on 
bottom. 


2. Use a screwdriver or 
coin to gently pry 
open top cover. 



3. Lift off top cover. 


4. Access jumpers. 


Accessing WAN 1 Jumpers 


- 7 - 




The figure below illustrates the location of the jumpers. All 16 jumpers must be set the same. 



WAN 1 Interface Jumpers 







2.3 LEDs 


The table below identifies and describes the LED indicators on the front panel. 


LEDs 


LED 

COLOR 

IN DIC ATION/LUN CTION 

SYS 

Red 

On power-up, LED blinks momentarily, then goes out. If LED stays 
lighted, the unit has failed and is not operational. 

Off 

Router is operational. 

TST 

Red 

A diagnostic test is active - flashes for an interface test; steady on for a 
network test. 

ONL 

Red 

Not used. 

W1 

Green 

The WAN interface is up. 

Off 

The WAN interface is down. 

W2 

Green 

Not used. 

LAN 

Green 

The LAN interface is up. 

Off 

The LAN interface is down. 

COL 

Red 

Blinks once when any collision occurs on the LAN. 

PWR 

Green 

Power is on. 


EXECUTIVE ROUTER 


CONSOLE ^ROUTER mate 


Osicom 


; • §> % «> * * * * f> • • • : 

m *) m m % m • « % *> % » 


SYS TST ONL W1 W2 LAN COL PWR 

• ••••••• 
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2.4 Interfaces and Cables 



Rear Panel Connectors 


NOTE 

Do not connect cables until completing the Quick Start procedure. 


See Interfaces and Cables for interface pin descriptions and cables available from Osicom. 


WAN 1 

The WAN 1 Interface connects the router to the Wide Area Network through an external DCE. 
The connector is a DB25 female that can be configured as RS-232, RS-530, V.35, or X.21. 
Configure the interface to match the DCE. Set jumpers on the router card to match the type of 
electrical interface used. See Jumper Settings for WAN 1 Interface 

Use the appropriate cable to connect the WAN 1 interface to the DCE. See Interfaces and 
Cables. 


LAN 

The LAN connector is a lOBaseT interface that connects the router to the Local Area Network 
(LAN). It is an RJ45, 8-pin keyed modular jack. Use a customer-supplied lOBaseT drop cable to 
connect the LAN interface to a Media Access Unit (MAU) on the LAN. 


WAN 2 

When the optional integral V.32bis modem is present, this interface provides a connection to dial 
lines for secure remote dial-in access of the router's management screens. It is an 8-pin modular 
connector. See Dial-In Management . 
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Console 

The Console interface on the front panel is an RS-232 DB25 female connector. It provides a 
connection for local management via an ASCII terminal. The console cable should be a 
straight-through cable. 


fnM.Qni P Intarfara 



Use the terminal to access management screens for configuring, testing, and monitoring the status 
of the router. 


Power 

The Executive Router includes a wall-mount transformer. Refer to Specifications for power 
requirements. 


NOTE 



Use only the wall-mount transformer included with the unit. See the Multipurpose 
Label on the underside of the unit for the part number. 
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2.5 Management 


The Executive Router can be managed in a variety of ways, as follows: 


• ASCH terminal 

• SNMP (Simple Network Management Protocol) 

• Telnet 

• Dial-in management (optional) 


NOTE 

Before SNMP or Telnet management can be used, you must first configure the IP address on 
the Port IP Routing Options screen (see Quick Start Procedure) . 


SNMP and Telnet can be used simultaneously; telnet and terminal management cannot. 


2.5.1 Passwords 

Access to certain management screens is restricted to users who can enter a password. 

Either of two passwords can be entered. If neither password has been configured, enter the 
default password, which is [CR] for both passwords. 


The two passwords are: 


Console Password - grants limited access to the management screens. The user can access 
all screens except encryption screens. 


Key Password - grants access to all screens. 


Both passwords are configured on the Unit screen . 


2.5.2 Terminal Management 

Connect an ASCII terminal directly to the router's front-panel CONSOLE interface to access the 
management screens. See Quick Start Procedure . 
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2.5.3 Telnet/SNMP Management 

Telnet allows the management screens to be accessed from any host on the network. An SNMP 
management station can configure the optional encryption card using the enterprise MIB. Using 
the standard MIB II, an SNMP management station can view the status of the router. See 
Obtaining the Enterprise MIB . 


Telnet or SNMP management can be performed via the LAN or WAN interface. To manage the 
Executive Router using Telnet or SNMP: 


1. IP routing must be enabled (default). See Port Configuration . 


2. If the WAN interface is configured for Unnumbered mode (default), you must use the LAN IP 
address (default is 192.0.2.1). 


3. If the WAN interface is configured for Numbered mode, you can use either the LAN or WAN 
IP address (default WAN address is 192.0.3.1). 


4. Verify that the interface associated with the address you are attempting to access is Up (see the 
LAN Status and WAN Status screens. 


5. Lor SNMP management, configure the SNMP R/O Community and the SNMP R/W 

Community to match the strings used by the SNMP management station (see the Management 
screen) . 

Defaults: R/O = public 
R/W = private 


6. Lor Telnet access, set the Telnet Server parameter on the Management screen to Enabled 
(default). 

After making a Telnet connection to a defaulted unit, configure the IP addresses assigned by 
your network administrator to the router's LAN port. When you re-configure the IP address 
for the interface to which the Telnet session is connected, the Telnet session is interrupted. 
You can then establish a new connection, if you wish, to the newly configured address. 


NOTE 

The default IP addresses are only to facilitate initial configuration by remote access. They 
cannot be used as the permanent IP addresses. 
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2.5.4 Dial-In Management 

This optional feature provides a backup management path. The optional WAN 2 interface is used 
for secure dial-in management. A remote modem operator can access the terminal management 
screens. The remote modem must be V.32-compatible. 


Before making a dial-in management call, attach the cable and configure the integral and 
originating modems as follows: 


1. Connect the DDD line cable (115-0414-001) from the WAN 2 interface to an RJ11 jack 

2. On the Modem screen , configure the following parameters: 

• Modem Security (default = Disabled) 

• Security Password (default = password ) 

• Auto Answer (default = Enabled) 


NOTE 

If using Osicom’s 4532 or 4232 modem, you can enable Modem Security to prevent an 
unauthorized connection. If using a modem other than Osicom’s 4532 or 4232 modem, 
Modem Security must be disabled. 


3. If using Osicom’s 4532 or 4232 modem to originate the call, configure the originating 
modem as follows: 

a. Enable level 1 security. 

AT"E1 


b. Set both passwords to match the Security Password (default is password). 

AT'Zpassword 

AT'Ypassword 

c. Set the modem user ID to usr in order to connect the router with security. Use 
AT"Wusr. 


After making a connection, enter any key; the router’s banner screen appears and you are 
prompted to enter a terminal selection, followed by the password. 
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2.6 Quick Start Procedure 

The following steps facilitate initial installation and configuration. 

NOTE 

This procedure assumes you are accessing the management screens from a directly-connected 
terminal. 

Default configuration settings - The default settings allow you to get started quickly and easily 
with minimal configuration. 

NOTE 

If your application matches the default settings of IP routing over an unnumbered PPP link, 
then you only need to configure the IP address and subnet mask on the LAN port. See Step 7 . 

Verify that the following parameters suit your application. Contact your carrier and network 
administrator or Internet services provider. 

The router’s default settings are: 

LAN interface: 

Protocol: Ethernet (fixed) 

Port 0 (LAN): 

IP Address: 192.0.2.1 
Subnet Mask: 255.255.255.0 
IP Routing: Enabled 
IPX Routing: Disabled 
Bridging: Disabled 
Frame Type: TYPE II 

WAN Interface: 

Protocol: PPP (Point-to-Point) 

Port 1 (WAN): 

IP Routing: Enabled 
Mode: Unnumbered 
IPX Routing: Disabled 
Bridging: Disabled 

IP Address: 192.0.3.1 (Numbered Mode) 

Subnet Mask: 255.255.255.0 
DLCI: 25 


NOTE 

The WAN 1 interface is pre-configured according to the specific model ordered (RS-232, 
RS-530, V.35, or X,21). If your application requires a different interface, see Jumper Settings 
for WAN 1 Interface . See also Step 4 . 


Perform all the steps in the procedure if your application requires settings that are different from 
the defaults. 
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□ STEP 1 : Installation Checklist 


1. Prepare the site, including provision for a dedicated power outlet. Locate the unit in close 
proximity to the LAN hub. 

2. Obtain the following items: 

- ANSI terminal with a straight-through RS-232 cable. 

- a lOBaseT LAN cable. 


□ STEP 2: Power Up 

1. Apply power. 

2. The red SYS LED blinks momentarily, then goes out. 


□ STEP 3: Connect Terminal 

1. Use a straight-through RS-232 cable to connect the terminal to the CONSOLE port on the 
front of the router. Power-on the terminal and configure the terminal as follows: 

Rate: 9600 bps 
Mode: full duplex 
Character: 8 bits 
Parity: none 
Stop bits: 1 
CR = CR 

The Terminal Selection screen appears. If the Terminal Selection screen does not appear, type 
[CTRL-N], 

2. Type the letter for the type of terminal that is connected to the router; you are prompted for a 
password. 

3. Type [CR], the default password, to access the management screens. The Main Menu is 
displayed. 


□ STEP 4 : Verify the correct interface type required for connection to the DCE 

3. Access the WAN 1 Lower Layer Status screen . The Interface Type is read from the 
hardware jumpers. 

4. If the interface is not the type required by the DCE, set the jumpers as described in Jumper 
Settings for WAN 1 Interface . 


NOTE 

If you change the jumpers for the WAN 1 interface, you may require a different cable than the 
one shipped with the unit. 
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□ STEP 5: Configure Protocol for the WAN 

1. Access the WAN 1 Configuration screen . 

2. Select the Protocol: PPP, Frame Relay - Annex D. or Frame Relay - No LMl. Default is 
PPP. 

□ STEP 6: Enable/Disable IP, IPX, Bridging for LAN 

Access the Port 0 Configuration screen and set IP Routing, IPX Routing, and Bridging to 
Enabled or Disabled. 

□ STEP 7: Configure IP, IPX Options for LAN 
If IP Routing is Enabled'. 

1. Access the Port 0 IP Routing Options screen . 

2. Configure the Address. 

3. Configure the Subnet Mask. 

4. Configure Frame Type to match the type used on the LAN. The default is TYPE II, which is 
almost always used. 

If IPX Routing is Enabled'. 

1. Access the Port 0 IPX Routing Options screen . 

2. Configure the IPX Network Number for the LAN. 

3. Configure the Frame Type to match the type used on the LAN. 

□ STEP 8: Enable/Disable IP, IPX, Bridging for WAN 

For Point-to-Point applications, configure the following for Port 1 only. 

For Frame Relay applications, configure the following for each port 1-14 as required. 

1. Access the Port Configuration screen . 

2. Set IP Routing, IPX Routing, and Bridging to Enabled or Disabled. 

3. Frame Relay only: Configure the DLCI for this port. The number configured here is the 
DLCI used to reach the remote site. 

4. Frame Relay only: verify Encapsulation is set for RFC1490 (default). 
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□ STEP 9: Configure IP, IPX Options for WAN 

For Point-to-Point applications, configure the following for Port 1. 

For Frame Relay applications, configure the following for each port for which a DLCI was 
configured in the previous step. 

If IP Routing is Enabled'. 

1. Access the IP Routing Options screen for the individual port. 

2. Configure the IP Address and Subnet Mask. No entries are required for Unnumbered Mode. 
For Frame Relay applications: 

If the remote router requires it, enable Inverse ARP on the port IP Routing Options screen. 
The router does not require Inverse ARP (default is disabled). 

If IPX Routing is Enabled'. 

1. Access the IPX Routing Options screen for the individual port. 

2. Configure the IPX Network Number for the WAN. No entry is required for Unnumbered 
Mode. 

3. Enable or Disable IPXWAN to match the router on the other end of the WAN link. Support 
for IPXWAN is only provided to allow the Executive Router to be compatible with Novell 
routers. It is not required to route IPX and should be disabled unless it is required. The 
default is disabled. 

For Frame Relay applications: 

If the remote router requires it, enable Inverse ARP on the port IPX Routing Options 
screen. The Executive Router does not require Inverse ARP (default is disabled). 

□ STEP 10: Attach LAN and WAN Cables 

1. Use the WAN cable included with the unit to connect the WAN 1 interface to the DCE. 

2. Use a customer-supplied lOBaseT drop cable to connect the lOBaseT interface to the LAN. 
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□ STEP 11: Save Configuration to Flash 

When your configuration has been implemented and checked out to be satisfactory, access 
the Main Menu and select Save to Flash; a prompt will appear to confirm your selection. 

If the new configuration is not satisfactory, power cycle the router (off-on) before saving it 
to restore the original configuration. 

WARNING 

If the unit is power cycled before the configuration is saved to flash, the original 
configuration will be restored. 


You are now ready to pass data. Return to 
configuration and management screens. 


Contents 


to locate specific information on 


2.7 Obtaining the Enterprise MIB 

There are two enterprise MIBs: 


• CSU - configure and monitor CSU parameters 

• Encryption - configure encryption options 

The enterprise MIBs can be downloaded from Osicom's Web site at: www.osicom.com . 
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3. TERMINAL 
OPERATION 


Start of Document 


• 3.1 Screen Structure, Terminal Management 

• 3.2 Keys and Conventions 

• 3.3 Terminal Selection 

• 3.4 Password 

• 3.5 Main Menu 

□ 3.5.1 Save To Flash 

□ 3.5.2 Logoff 

□ 3.5.3 Screen Path 


This section provides an overview of terminal management. After reading this section, the user 
will be familiar with the following: 


• Terminal screen structure and hierarchy of menus 

• Keys, conventions, and screen paths - which keys to use to move around screens, edit 

parameters, and access other screens 

• ASCII terminal communication parameters 

• Terminal Selection 

• Password 

• Main Menu 

• Save To Flash 

• Logoff procedure 
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3.1 Screen Structure, Terminal Management 

This figure shows the screen structure for the router’s terminal management screens (see Main 
Menu) . 

Terminal 
S election 

password 


Main 

Menu 

Status and Test 

Event Log 

Configuration 

TFTP 

— Modem 

Unit 

Management 

Save To Flash 

L- Logoff 


Screen Structure, Terminal 
Management 
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3.2 Keys and Conventions 

Prompts at the bottom of each screen instruct the user which keys to use to: 

• Position the cursor 

• Edit parameters 

• Execute commands 

• Access other screens 

See the table of the most frequently used keys . 

Edit Fields 

To configure a parameter by typing a value: 

1. Press [CR] to highlight the field. 

2. Type the value. 

3. Press [CR] again to exit the field. 

To restore the parameter to its original contents, press [Esc] before exiting the field. 

To edit existing text in a field that can be edited: 

1. Move the cursor to the field and press [Ctrl-E] to highlight the field. 

2. Use the arrow keys to move the cursor within the field. 

3. Type over the existing information. 

4. Press [CR] to exit the field. 

To delete existing text from a field that can be edited: 

1. Move the cursor to the field and press [CR]. 

2. Press [Space Bar]. 

3. Press [CR] again. 

Selecting from multiple options 

1. Move the cursor to the parameter. 

2. Press [CR] to toggle/scroll through the available options. 

3. When the desired option is displayed, either move the cursor to the next parameter using 
[Space Bar] or [Backspace], or exit the screen. 

To restore the parameter to its original contents, press [Esc] before exiting the field. 

Saving Changes 

Press [X] to exit from a screen. If you have modified any parameter, you are prompted: 


Confirm this configuration? 

No Yes 

Select No to exit the current screen without saving the changes; select Yes to save the changes 
and exit. 


- 23 - 




Frequently Used Keys 

KEY 

FUNCTION 

Move Around in Screens 

[Space Bar] 

cursor down 

[Back Space] 

cursor up 

[C trl-N] 

Terminal Selection screen 

[Ctrl-O] 

re-draw screen 

[Ctrl-T] 

return to Main Menu * 

[X] 

exit to previous screen 

Type an Entry 

[CR] 

select field 

[Back Space] 

delete character left 

[Esc] 

restore original setting 

[Ctrl-E] 

highlight field, edit text 

[CR] [Space Bar] 
[CR] 

delete current contents 

Select From List 

[CR] 

scroll/toggle through list 

[Esc] 

restore edited field to its origina 

[Space Bar] 

1 setting 


move to next field 

* [Ctrl-Tl returns to the Main Menu without 
prompting to confirm configuration changes. 


Certain prompts will change to correspond to the function or operation. An example is shown 
below. 


FUNCTION/OPERATION 

PROMPT 

Edit an entry 

Edit Field = [CR] 

Select from multiple options 

Scroll Through Options = [CR] 

Select another menu 

Select Menu = [CR] 
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3.3 Terminal Selection 


Use any conventional ASCII asynchronous display terminal to access the router's management 
screens. 

Connect the terminal to the CONSOLE interface using a straight-through RS-232 cable. 
Configure the terminal for: 

• Rate: 9600 bps 

• Mode: full duplex 

• Character: 8 bits 

• Parity: none 

• Stop bits: 1 

• Flow control: DC1/DC3 (Xon/Xoff) 

When the unit is turned on, there is a brief delay as internal diagnostics run automatically. Then 
the Terminal Selection screen appears. 
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// TM 

m m m mu / 1111111/ i//// 

/// // // m // // n // 

/// // // /// // // /////// 

m // // / // ////// / / / 

m // //// ///// // //// ///// 

Executive Router 


Version 2 .x.xx Copyright 1996-1997 Osicom Technologies, Inc. 

(A) ANSI 3.64 (B) DEC VT100 (C) PC ANSI 

(D) IBM 3101 (E) DEC VT52 (F) Televideo 910 

Enter Terminal Selection —> 


V 


Terminal Selection Screen 


When the router is powered up, the following prompt appears on the screen: 


ROUTERmate-EX Executive Router Boot Diagnostics 2.x.xx 
Copyright 1996-1997 Osicom Technologies, Inc. 

Press D to run diagnostics 


If you want to run diagnostic tests or initiate TFTP downloads, press D to display the Diagnostic 
Menu . If you do not press D at the prompt, after a slight delay, the Terminal Selection screen 
appears. 
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If the Terminal Selection screen does not appear, press [Ctrl-N]. 
Type the letter for the type of terminal that is connected to the unit: 

(A) ANSI 3.64 

(B) DEC VT100 

(C) PC ANSI 

(D) IBM 3101 

(E) DEC VT52 

(F) Tele video 910 


If the terminal displays garbled characters after the terminal type is selected, press [CTRL-N] to 
return to the Terminal Selection screen, where you can select a different terminal type. 

Telnet: When a Telnet connection is used to access the management screens, the terminal type 
usually can be determined automatically. If not, the Terminal Selection screen is displayed. 
The user has three attempts or 30 seconds to enter the password before the session is 
disconnected. 
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3.4 Password 

Access to the management screens is restricted to users who can enter a password. 


NOTE 

When encryption hardware is installed, the password is checked for Console Password or Key 
Password. 


• If the Console Password is entered, encryption screens cannot be accessed and encryption 
options cannot be changed. 

• If the Key Password is entered, all screens can be accessed. 

The default Key Password is [CR]. Entering [CR] on a defaulted unit with encryption 
hardware installed, causes the user to logon at the Key Password level. 


Configure the passwords on the Unit screen . 
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// TM 

/// /// /// ///// / //////// ///// 

/// // // /// // // // // 

III // II /// // II /////// 

III // // / // ////// // / 

III // //// ///// // //// ///// 


Password: 


Enter the password, no keys will echo. 


Enter = [CR] 


V 


Password Screen 


To access the management screens, enter either the console password or the key password at the 
prompt. 

If no password has been configured, simply press [CR]. 

The Main Menu is displayed. 

If an incorrect password is entered, access is denied and the password prompt is re-displayed. 


- 27 - 











Telnet: When a Telnet connection is used to access the management screens, the terminal type 
usually can be determined automatically. If so, the banner screen and password prompt are 
displayed. If the user must select a terminal type, the password prompt is displayed after the 
terminal is selected. 


NOTE 

The Telnet user has 30 seconds from the time the Telnet session is connected to enter the 
password, or the session is disconnected. 
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3.5 Main Menu 


The Main Menu is the top level screen from which you select other screens to manage and 
configure the router and CSU. 


Osicom Technologies 
ROUTERmate-EX Executive Router 

Main Menu 

Status and Test 

Event Log 

Configuration 

TFTP 

Unit 

Management 
Save To Flash 
Logoff 




Save Configuration to Flash? 
No Yes 


Cursor Down = [Space Bar] 
Cursor Up = [Backspace] 




Reselect = [ A N] 
Redraw = [ A 0] 


Select Menu = [CR] 
Main Menu = [ A T] 


Main Menu 


Screen Path 

Terminal Selection 
Enter Terminal Selection 

* 

Password 
Enter Password 

* 

Main Menu 


To make a selection from the Main Menu: 

Press [Space Bar] or [Back Space] to move the cursor to the desired selection. 
Press [CR]; the selected menu appears. 


3.5.1 Save To Flash 

After the current configuration checks out to be satisfactory, you can save it to Flash as the 
permanent configuration. To save the current configuration to flash: 


1. Position the cursor on Save To Flash. 

2. Press [CR]; a message box is displayed indicating the status of save. 

If Yes is selected, "Saving Configuration, please wait” is displayed, followed by "Save to flash 
complete" with the cursor next to a choice of OK. 

While "Saving Configuration, please wait" is displayed, keyboard input is ignored. 
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3.5.2 Logoff 

Select Logoff to return to the Terminal Selection screen. Access to the management screens is 
then restricted to users who can enter either the console password or the key password. 


NOTE 

Configuration changes are lost if the unit is reset or power is turned off without first saving the 
configuration to flash. 


Telnet: Selecting Logoff disconnects the Telnet connection. 


3.5.3 Screen Path 

To help the user navigate through the menus and screens, a Screen Path is illustrated next to each 
screen. Screen names are inside boxes. Commands and on-screen selections that lead to a screen 
are written in italics. 

As shown in the screen path for the Main Menu , for example: at the Terminal Selection screen, 
enter the terminal selection [A - F] to display the Password screen. Enter the password to 
display the Main Menu. 


- 30 - 




4. STATUS AND TEST 
SCREENS 


Start of Document 


• 4.1 Screen Structure, Status and Test 

• 4.2 Status and Test Menu 

• 4.3 Router Summary 

• 4.4 Interface Status Summary 

□ 4.4.1 LAN Status 

□ 4.4.2 WAN Status (Frame Relay) 

■ 4.4.2.1 Lower Laver Status (WAN) 

■ 4.4.2.2 Annex D Status 

■ 4.4.2.2.1 DLCI Status Table 

□ 4.4.3 WAN Status (PPP) 

• 4.5 Port Status Summary 

□ 4.5.1 Port Status (LAN - Ethernet) 

□ 4.5.2 Port Status (WAN, Frame Relay) 

□ 4.5.3 Port Status (WAN. PPP) 

■ 4.5.3.1 LCP Status 

■ 4.5.3.1.1 LCP Negotiable Options 

■ 4.5.3.2 IPCP Status 

■ 4.5.3.3 IPXCP Status 

■ 4.5.3.4 BCP Status 

• 4.6 TCP/IP Status and Test Menu 

□ 4.6.1 Ping/Trace Route 

□ 4.6.2 IP Status 

■ 4.6.2.1 IP Port Counters 

□ 4.6.3 ICMP Status 

□ 4.6.4 TCP and UDP Status 

■ 4.6.4.1 TCP Connection Table 

□ 4.6.5 SNMP Status 

□ 4.6.6 ARP Table 

• 4.7 IPX Status 

□ 4.7.1 IPX Status (LAN and WAN! 

■ 4.7.1.1 IPX RIP/SAP Status (LAN and WAN) 

■ 4.7.1.2 IPXWAN Status 

• 4.8 Bridging Status 

□ 4.8.1 Port Bridging Status 

• 4.9 IP Routing Table 

• 4.10 IPX Routing Table 

• 4.11 IPX Services Table 

• 4.12 Bridging Table 

• 4.13 Event Log 
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This section illustrates and describes the router's status and test screens and the event log. 
Basically, this text serves as a reference tool for defining the various parameters and options 
appearing on the screens. 

After reading this section, the user will be able to navigate through the interface and port status 
and test screens and understand the contents and function of each. 


4.1 Screen Structure, Status and Test 

The organization of the Status and Test screens is shown below. Access the Event Log from the 
Main Menu. 


Terminal 

Selection 


password 


Main 

Menu 


Status and 
Test Menu 


Router Summary 


Interface 
— Status 
Summary 


Port 

— Status 
Summary 


— LAN Status 

— WAN Status 


Lower Layer Status 

Annex D Status (Frame Relay) — DLCI Status Table 


— Port Status ->— 


LCP Status (WAN, PPP) —Negotiable Options 
IPCP Status (WAN, PPP) 

IPXCP Status (WAN, PPP) 

BCP Status (WAN, PPP) 


TCP/IP 
Status — ; 
and Test I 


Ping/Trace Route 

IP Status — ip Port Counters 

ICMP Status 

TCP and UDP Status — TCP Connection Table 
SNMP Status 
ARP Table 


— IPX Status — Port IPX Status - 

— Bridging Status — Port Bridging Status 

— IP Routing Table 

— IPX Routing Table 

— IPX Services Table 


IPX RIP/SAP Status 
IPXWAN Status (WAN) 


— Bridging Table 


Screen Structure, Status and Test 
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The Status and Test screens and the Event Log are described below. 


Router Summary - view the major configured options and parameters of all the ports defined on 
the router, including: interface, operational status, DLCI (frame relay), IP address, IPX network 
number, and IPXWAN and bridging status. 


Interface Status Summary - view the configured protocol for the LAN and WAN interfaces and 
the operational status of each. Access the interface-specific screens below. 


LAN Status - view the configured and operational condition of the LAN interface; monitor 
counters and statistics. 

WAN Status - view the configured and operational condition of the WAN interface; 
monitor counters and statistics; access the screens below. 

Lower Layer Status - monitor statistics of errored frames transmitted and received over 
the WAN interface; monitor WAN utilization. 

Annex D Status (Frame Relay only) - monitor RLC 1315 error and status messages; 
access the DLCI Status Table. 

DLCI Status Table (Frame Relay only) - view the status of all Data Link Connection 
Identifiers (DLCIs). 


Port Status Summary - view the status of all the virtual ports configured on the router; includes 
port name, corresponding interface, protocol, and condition (up, down, or disabled). Access the 
port-specific status screens below. 

Port Status (LAN) - view the status and monitor counters and statistics for the LAN 
interface. 

Port Status (WAN) - view the status and monitor counters and statistics for each port on 
the WAN interface. If the protocol is PPP, access the screens below. 

LCP Status (PPP only) - view the status of the Link Control Protocol, which is used to 
configure, maintain, and terminate a point-to-point link. 

LCP Negotiable Options - view the values of LCP negotiable options in configuration 
requests sent and received by the router. 

IPCP Status (PPP only) - view the status of the IP Control Protocol, which is responsible 
for configuring and establishing the PPP IP protocol modules on both ends of a 
point-to-point link. 

IPXCP Status (PPP only) - view the status of the IPX Control Protocol, which is 
responsible for configuring and establishing the PPP IPX (Internetwork Packet exchange) 
protocol modules on both ends of a point-to-point link. 

BCP Status (PPP only) - view the status of the Bridging Control Protocol, which is 
responsible for configuring and establishing the PPP bridge protocol modules on both ends 
of a point-to-point link. 
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TCP/IP Status - access the screens below. 

Ping/Trace Route - use the ping command to determine if a gateway (router) or host in the 
network is reachable or use the trace route command to determine the routes used from 
your router to a specified host or gateway (router). 

IP Status - view information and statistics for the Internet Protocol (IP) for all ports on the 
router which are configured for IP routing. 

IP Port Counters - view the number of datagrams received and transmitted each port 
configured for IP routing. 

ICMP Status - view information and statistics for the Internetwork Control Message 
Protocol (ICMP) for all ports on the router which are configured for IP routing. 

TCP and UDP Status - view information and statistics for the TCP (Transmission Control 
Protocol) and UDP (User Data Protocol) for all ports on the router which are configured 
for IP routing; access the screens below. 

TCP Connection Table - view MIB II information about the router's existing TCP 
connections. 

SNMP Status - view input and output statistics and counters for Simple Network 
Management Protocol. 

ARP Table - view the physical address and corresponding network address used in Address 
Resolution Protocol. 


IPX Status - view a summary of information and statistics for all ports on which IPX 
(Internetwork Packet exchange) routing has been enabled; access the screens below. 

Port IPX Status (LAN and WAN) - view information and statistics of each ports on 
which IPX routing has been enabled. 

Port IPX RIP/SAP Status (LAN and WAN) - view input and output RIP (Routing 
Information Protocol) and SAP (Service Advertising Protocol) message counters. 

Port IPX WAN Status (WAN only) - view the status of counters for IPXWAN protocol, 
which is used for establishing connections across point-to-point (WAN) links. 


Bridging Status - view a summary of information and statistics for each port on which bridging is 
enabled; access the port-specific screens. 

Port Bridging Status - view counters for various types of received and transmitted frames. 


IP Routing Table - view the IP Routing Table. 


IPX Routing Table - view the IPX Routing Table. 


IPX Services Table - view the Service Advertising Protocol (SAP) Table. SAP is an IPX 
protocol that is used to advertize various Novell application services offered by such devices as 
file servers, printer servers, and gateways. 
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Bridging Table - view the Bridging Table. 


Event Log - view network messages that occur during startup and operation of the router. 
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4.2 Status and Test Menu 


Access the Status and Test Menu from the Main Menu. This is the top-level menu from which 
you select other screens to view the status and statistics of the LAN and WAN interfaces. 


To make a selection: 

1. Press [Space Bar] or [Back Space] to move the cursor to the desired selection. 

2. Press [CR]; the selected menu appears. 


Osicom Technologies 
ROUTERmate-EX Executive Router 

Status and Test Menu 

Router Summary 
Interface Status 
Port Status 
TCP/IP Status 
IPX Status 
Bridging Status 
IP Routing Table 
IPX Routing Table 
IPX Services Table 
Bridging Table 


Cursor 

Cursor 


Down 
Up = 


= [Space Bar] 
[Backspace] 


Select Menu = [CR] 
Exit = [X] 


Status and Test Menu 


Screen Path 

Main Menu 
Status and Test 

+ 

Status and Test Menu 
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4.3 Router Summary 

The Router Summary screen provides an informational and operational status report on all the 
ports configured on the router. You can view the status of up to 15 logical ports configured. See 
Router Summary. Frame Relay application and Router Summary, PPP application . 


r 


00:00:6d:78:90:12 


Osicom Technologies 
ROUTERmate-EX Executive Router 




Router Summary 


Port 

0 Port 0 

1 Port 1 

2 Port 2 

3 Port 3 


Interface 
LAN Up 
WAN1 Up 
WAN1 Up 
WAN1 Up 


DLCI/PPP 

100 Up 
200 Down 
1000 Dis 


IP Address 

Y 192.0.2.1 

Y 192.0.3.1 

Y 192.0.1.3 

Y Unnumbered 


IPX 

Y 
N 
N 

Y 


Network 

00000001 

00000003 

OOOOOOac 

Unnumbered 


IPXWAN Br 
N 

Dis Y 

Dis Y 

Up Y 


Exit = [X] 


V 


Router Summary (Frame Relay) 


Screen Path 

Main Menu 
Status and Test 

* 

Router Summary 


Port 0 is always assigned to the LAN interface and ports 1 through 14 are available for the WAN 
interface. 

This screen is updated every two seconds. 

The MAC address is permanently displayed in upper left comer of the screen. 

Port - identifies the port number and the first 8 characters of the port name. 

Interface - identifies the interface (LAN or WAN 1) to which the port is configured and whether 
the interface is Up, Down, or Dis (Disabled). 

DLCI/PPP - identifies the Data Link Connection Identifier or Point-to-Point NCP (Network 
Communications Protocol) status. This field is blank for LAN. 

Frame Relay: the DLCI number and (Up, Down, or Dis (Disabled). 

PPP: Any NCPs that are up are displayed (in the example shown in Router Summary. PPP 
application . IP and IPX are up). NCPs that are not up are not displayed. 


IP Address - Internet protocol enabled (Y) or disabled (N) and local IP address assigned to the 
port. 
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IP Address and IPX Network - the IP Address and the IPX Network fields display 
Unnumbered when a WAN port set to Unnumbered. If IPXWAN is enabled, the network number 
may be a number assigned by IPXWAN instead of the number configured for the port. IPXWAN 
assigns the primary network number based on the master/slave relationship. If the local and 
remote router’s WAN ports have different IPX network numbers, then the master unit will assign 
an IPX network number to the slave. 

(Y) is protocol enabled; (N) is disabled. 

IPXWAN - IPXWAN status: Up, Down, or Disabled. (WAN only) - a protocol developed by 
Novell and specified in RFC 1634. The purpose of IPXWAN is to provide a common way of 
exchanging router to router information across different type of wide area links. RFC 1634 
describes how Novell IPX operates over various WAN media using the IPXWAN protocol. 

Support for IPXWAN is only provided to allow the router to be compatible with Novell routers. 

It is not required to route IPX and should be disabled unless it is required. The default is 
disabled. 


NOTE 

IPXWAN must be set to the same value on both ends of a connection. If it is not set to the 
same value, then the router will not be able to communicate across the link. 


Br - bridging enabled (Y) or disabled (N). 



Osicom Technologies 

00:00:6d:78:90:10 ROUTERmate-EX Executive Router 






Route 

r Summary 



Port 


Interface 

DLCI/PPP 

IP 

Address 

IPX 

Network 

0 Port 

0 

LAN Up 


Y 

192.0.2.1 

Y 

00000001 

1 Port 

1 

WAN1 Up 

Ip IPX 

Y 

192.0.3.1 

Y 

00000003 



IPXWAN Br 
N 

Dis N 


Exit = [X] 



Router Summary (PPP) 


Screen Path 

Main Menu 
Status and Test 

+ 

Router Summary 
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4.4 Interface Status Summary 


Access the Interface Status Summary screen to view the condition of the LAN and WAN 
interfaces. 

Interface status corresponds to MIB II Interface operational state. 

This screen is updated every two seconds. 

See WAN Configuration for descriptions of protocols. 


r 


Osicom Technologies 
ROUTERmate-EX Executive Router 




Interface Status Summary 


Interface 

LAN 

WAN 1 


Protocol 
Ethernet 
FR - Annex D 


Status 

Up 

Up 


Cursor Down = [Space Bar] 
Cursor Up = [Backspace] 


Select Menu = [CR] 
Exit = [X] 





Interface Status Summary 


Screen Path 


Status and Test Menu 
Interface Status 


Interface Status Summary 
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Interface Status 

PROTOCOL 

STAT 

US 

CONDITION 

Ethernet 

Up 

Down 

Disabled 

Link is up 

Link is down 

Interface State set to disabled 

PPP (Point-to-Point) 

Up 

Down 

Disabled 

The LCP (Link Control Protocol) is up 

The LCP is not up 

Interface State set to disabled 

FR-No LMI (Local Management Interface) 

Up 

Down 

Disabled 

Flags are present and CSU Line Status 
is up 

Flags are missing or CSU Line Status 
is down or in test 

Interface State set to disabled 

FR-Annex D 

Up 

Down 

Disabled 

Network is responding to LMI request 

* 

Network is not responding to LMI 
request * 

Interface State set to disabled 

* Determined by Error Threshold option (see WAN protocol options for 
Frame Relay). 
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4.4.1 LAN Status 


Access the LAN Status screen to view the operational condition of the LAN interface. The 
protocol for the LAN interface is fixed at Ethernet. This screen is updated every two seconds. 

Press [C] to clear all counters. 

The counters are based on MIB II RFC 1213. 


r 


Osicom Technologies 


ROUTERmate-EX 

LAN 

Protocol: 

State: 

Status: 

System Up Time: 

Last Change: 

Link Downs: 


Octets: 

Unicast Packets: 

Non Unicast Packets: 
Discards: 

Errors: 

Unknown Protocol: 


Executive Router 

Status 

Ethernet 

Enabled 

Up 

ddd hh:mm:ss 

. XX 

ddd hh:mm:ss 
1234567890 

. XX 

Input 

Output 

1234567890 

1234567890 

1234567890 

1234567890 

1234567890 

1234567890 

1234567890 

1234567890 

1234567890 

1234567890 

1234567890 




Clear = [C] 


Exit = [X] 




LAN Status 


Screen Path 

Status and Test Menu 
Interface Status 

* 

Interface Status Summary 
LAN 

* 

LAN Status 


Protocol - the configured protocol for the LAN interface. Fixed at Ethernet. 

State - the configured state (Enabled/Disabled) of the LAN interface. 

Status - the operational status (Up/Down) of the LAN interface. 

System Up Time - the amount of time the unit has been operational 
(days :hours: minutes: seconds). 

Last Change - the system up time value when the interface entered its current operational state. 

Link Downs - number of times the LAN interface has entered the link down state. 

Octets - number of octets (bytes) in each frame, including the Ethernet header, but excluding the 
CRC. 
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Unicast Packets - Input: all frames received from the ethemet chip including any frames 
containing unknown protocols (frames received in error are not counted). When bridging is 
disabled, only received frames with the ethemet chip’s MAC address are counted; when bridging 
is enabled, all frames on the LAN are counted. Output: all frames transmitted to the ethemet chip 
including all bridged, routed, and frames sourced by the router. 

Non Unicast Packets - number of subnetwork broadcast (all destinations) or multicast (multiple 
destination) packets received (input) or to be transmitted (output) on the LAN interface, including 
those that were discarded or not sent. 

Discards - Input: number of error-free frames received that could not be forwarded because of no 
buffer space. Output: number of frames that the router or bridge could not forward because of no 
buffer space. 

Errors - Input: the total number of Ethemet frames received in error. These errors are detected 
by the Ethemet chip and cause the appropriate input error counter on the LAN Port status screen 
to increment. Frames containing errors are not passed up to a higher layer protocol. Output: the 
total number of Ethemet frames that an error occurred while transmitting. These errors are 
detected by the Ethernet chip and also cause the appropriate output error counter on the LAN 
Port status screen to increment. 

Unknown Protocol (Input only) - the total number of frames received with the Ethemet 
protocol field set to a protocol that is not supported or is not enabled. Supported protocol field 
values are IP and IPX. The protocol field is checked for the encapsulation types selected on the 
IP and IPX routing options screen. Note that IP and IPX can be set to different encapsulation 
types which requires the Unknown Protocol test to be performed in both encapsulation types. 

The Unknown Protocol test is not performed on bridged frames. Frames containing Unknown 
Protocols are not passed up to a higher layer protocol. 
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4.4.2 WAN Status (Frame Relay) 

Use the WAN status screen to view statistical information for the WAN link. Annex D Status is 
available only if the protocol on the WAN Configuration screen is set for FR - Annex D. This 
screen is updated every two seconds. 

See LAN Status in the previous section for parameters and counters not defined here. 

The counters are based on MIB II RFC 1213. 

Press [C] to clear all counters. 
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WAN 1 Status (Frame Relay) 


Screen Path 

Status and Test Menu 
Interface Status 

* 

Interface Status Summary 
WAN 1 

* 

WAN 1 Status 


Protocol - the configured protocol for the WAN interface. 

Status - 

Annex D (Determined by Error Threshold option) 

Up - Network is responding to LMI request. 

Down - Network is not responding to LMI request. 

No LMI 

Up - flags are present and CSU Line Status is UP. 

Down - flags are missing or CSU Line Status is down or in test. 
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Octets - Input: number of octets (bytes) in each received frame, including the DLCI address and 
control fields, but excluding the CRC. The value reported by the SCC (Serial Communications 
Controller) includes the CRC but the CRC octets are subtracted before the counter increments. 
Output: all bytes in each frame transmitted to the SCC including the DLCI address and control 
fields, but excluding the CRC (the CRC is added after the frame is counted or sent). 

Unicast Packets - Input: all frames received from the SCC including LMI frames. Output: all 
frames transmitted to the SCC including LMI frames. 

Errors - Input: the total number of frames received in error. This includes any frames received 
with HDLC errors. HDLC errors (CRC, aborts, overruns, and too longs) are detected by the 
SCC and cause the appropriate error counter on the Lower Layer screen to increment. Frames 
containing errors are not passed up to a higher layer protocol. Output: the total number of frames 
that an error occurred while transmitting. These errors are detected by the SCC and also cause the 
Underrun counter on the Lower Layer screen to increment 

Unknown Protocol - the total number of frames received with Frame Relay protocol field set to a 
protocol that is not supported or is not enabled. Supported Frame Relay NLPID/PID field values 
are LMI, IP, IPX, and bridging. Frames containing Unknown Protocols are not passed up to a 
higher layer protocol. 
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4.4.2.1 Lower Layer Status (WAN) 

Use this screen to view statistics of errored frames transmitted and received over the WAN 
interface, monitor WAN utilization, and view the status of the control leads on the interface. The 
screen is the same for PPP and Frame Relay. See Lower Laver Status for RS-232, RS-530, and 
V.35 ; and Lower Laver Status for X.21 . 

This screen is updated every two seconds. 

Incrementing any of these error counters also causes the Input Errors or Output Errors counters 
to increment on the Interface Status screen. 
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WAN 1 Lower Layer Status (RS-232, RS-530, and V.35 Interface) 


Screen Path 

Status and Test Menu 
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Interface Status Summary 
WAN 1 

* 

WAN 1 Status 
Lower Layer Status 

* 

WAN 1 Lower Layer Status 


CRC Errors - received frames detected by the Serial Communications Controller (SCC) that 
contained HDLC Cyclic Redundancy Check (CRC) errors. 

Aborts - aborted received frames detected by the SCC. 

Too Longs - HDLC frames received that exceeded the maximum permitted frame size. The 
WAN interface can accept frames up to 2048 bytes long. 

Overruns - received overrun frames reported by the SCC. 

Underruns - transmitted underrun frames reported by the SCC. 
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Utilization - percent usage of available WAN link bandwidth during, as indicated, either 2 
seconds or 60 seconds. 

Interface Type - displays the interface configured for the WAN 1 interface (RS-232, RS-530, 
V.35. or X.21. The type displayed here is read from the jumpers on the router card. See Jumper 
Settings for the WAN 1 Interface . The WAN 1 interface is fixed at DTE. 

Control Lead Status - the state of the control leads on the WAN 1 interface, as follows: 

RTS - indicates Request To Send On or Off. 

DTR - indicates Data Terminal Ready On or Off. 

CTS - indicates Clear To Send On or Off. 

DSR - indicates Data Set Ready On or Off. 

DCD - indicates Data Carrier Detect On or Off. 

TM - indicates Test Mode On or Off. 

Control (X.21 only) - displays whether the Control Lead on the interface is On or OFF. 
Indicator (X.21 only) - displays whether the Indicator Lead on the interface is On or OFF. 
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4A.2.2 Annex D Status 


Use the Annex D Status screen to view operational information for Frame Relay. This option is 
displayed only if the protocol on the WAN Configuration screen is set for FR - Annex D. Also 
access the DLCI Status Table. The screen is updated every two seconds. 


The counters are based on Frame Relay MIB RFC 1315. 
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WAN 1 Annex D Status 


Error Type - the type of error that was last seen on this interface, as follows: 

Unknown Error 
Receive Short 
Receive Long 
Illegal DLCI 
U nk nown DLCI 
DLCMI Proto Err 
DLCMI Unknown IE 
DLCMI Sequence Err 
DLCMI Unknown Rpt 
No Error Since Reset 


DLCMI is Data Link Connection Management Interface 




Error Time - the system time when the last error condition was detected. 

Error Data - a hexadecimal string containing as much of the packet as possible for the last packet 
containing an error that was seen on the interface. 

Status Messages - Status Enquiry (output) frames sent to the network provider (the Frame Relay 
switch) or Status Response (input) frames received from the network provider. A Status Enquiry 
is sent to the network provider at intervals defined by the Polling Interval WAN protocol 
parameter (default is 10 seconds). 

Full Status Messages - Full Status Enquiry (output) frames sent to the network provider (the 
Frame Relay switch) or Full Status Response (input) frames received from the network provider. 
A Full Status Enquiry is sent to the network provider at intervals defined by the Full Enquiry 
Interval WAN protocol parameter (default is 6 seconds). The Full Status Response also contains 
information on the status of the Permanent Virtual Circuits (PVCs). 
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4.4.2.2.1 DLCI Status Table 


Access the DLCI Status Table to view the status of the DLCIs. (Fr - Annex D protocol only). 
This status is based on the LMI response received from the network (frame relay switch). This 
screen is updated every two seconds. 

Page Down/Up prompts are displayed if there are more than 15 entries. 

All DLCIs reported in LMI response are displayed. 
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WAN 1 Annex D Status 
DLCI Status Table 

+ 

DLCI Status Table 


DLCI - a Data Link Connection Identifier. The DLCI identifies the logical link on a Frame Relay 
network and is assigned by the network provider. Range is 0 to 1023. 

State - the state of the DLCI as reported by the switch in response to the router’s polls. 

Active - the normal operating state; the DLCI is up. 

Inactive - the DLCI is down. 

Invalid - displayed if the switch reports a DLCI as active and the DLCI is configured on a 
port, but the DLCI State is set to disabled. 

New - a newly-detected logical link. 
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4.4.3 WAN Status (PPP) 

On the WAN Status screen for PPP protocol , the contents are identical to the WAN Status screen 
for Frame Relay except the Annex D Status selection is not available. This screen is updated 
every two seconds. 

The counters are based on MIB II RFC 1213. 

Press [C] to clear all counters. 
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* 

Interface Status Summary 
WAN 1 

* 

WAN 1 Status 


Protocol - the configured protocol for the WAN interface. 

Status - Up indicates the LCP is up. 

Down indicates the LCP is down. 

Octets - Input: all octets in each frame received from the SCC including the address and control 
fields but excluding the CRC. The value reported by the SCC includes the CRC. The CRC octets 
are subtracted before the counter is incremented. Output: all octets in each frame transmitted to 
the SCC including the address and control fields but excluding the CRC (the CRC is added by the 
SCC after it is received). 

Unicast Packets - Input: all frames received from the SCC including LCP and NCP frames. 
Output: all frames transmitted to the SCC including LCP and NCP frames. 


- 50 - 




Discards - Input: the number of error free frames received by the SCC that the SCC could not 
forward because of no buffers. Output: the number of frames that the router or bridge could not 
forward because of no buffers. 

Errors - Input: the total number of frames received in error. This includes any frames received 
with HDLC errors and format errors. HDLC errors (CRC, aborts, overruns, and too longs) are 
detected by the SCC and cause the appropriate error counter on the Lower Layer screen to 
increment. PPP format errors (bad address and bad control) are detected by software cause the 
appropriate error counter on the PPP Port Status screen to increment. Frames containing errors 
are not passed up to a higher layer protocol. Output: the total number of frames that an error 
occurred while transmitting. Output errors are detected by the SCC and also cause the Underrun 
counter on the Lower Layer screen to increment. 

Unknown Protocol - Input only: the total number of frames received with the PPP protocol field 
set to a protocol that is not supported or is not enabled. Supported PPP protocol field values are 
LCP, IPCP, IPXCP, and BCP. Frames containing unknown protocols are not passed up to a 
higher layer protocol. 
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4.5 Port Status Summary 

The Port Status Summary screen displays the operational status of ports configured on the router. 
You can view the status of up to 15 logical ports defined. Port 0 is always the LAN interface and 
ports 1 through 14 are always available for the WAN interface. This screen is updated every two 
seconds. 


r 


Osicom Technologies 
ROUTERmate-EX Executive Router 


Port Status Summary 


Port Port Name 

0 Local Site 

1 Remote Site 1 

2 Remote Site 2 

3 Remote Site 3 


Interface 
LAN 
WAN 1 
WAN 1 
WAN 1 


Protocol 
Ethernet 
FR—1000 Up 
FR—1001 Down 
FR-1002 Disabled 
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Cursor Up = [Backspace] 
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Port Status Summary 


Screen Path 

Status and Test Menu 
Port Status 

* 

Port Status Summary 

The table below defines port status for Frame Relay . 

To view the status of a specific port, position the cursor on the port number and press [CR]; the 
port-specific screen is displayed. See Port Status (LAN) , Port Status (WAN, Frame Relay) , and 
Port Status (WAN. PPP) . 

The contents of the port-specific status screen depends on two factors: 

• LAN or WAN interface 

• Protocol selected 

Port - number of the port (0 through 14). 

Port Name - a name to identify this port when configuring and managing the router. 

Interface - identifies the interface (LAN or WAN 1) to which the port is mapped. Port 0 is fixed 
at LAN. 

Protocol - the configured LAN or WAN 1 connect protocol. For Frame Relay, the protocol field 
also displays the DLCI number and DLCI status. 
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Port Status (Frame Relay) 

PROTOCOL 

STATUS 

CONDITION 

Fr-No LMI 

Up/Down 

Follows Interface Status 


Disabled 

DLCI state set to disabled * 

FR-Annex D 

Up 

DLCI LMI status up 


Down 

DLCI LMI status down 


Disabled 

DLCI state set to disabled * 

* See Port Status screen. 


NOTE 

Only ports configured are shown. 
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4.5.1 Port Status (LAN - Ethernet) 

The screen below illustrates the Port Status screen for port 0 , which is always the LAN interface. 
The protocol is fixed at Ethernet. This screen is updated every two seconds. 

When any of the Input error counters increment, the Input error counters on the Interface Status 
screen also increment. 

Incrementing any of the input error counters also causes the Input Errors counters to increment 
on the Interface Status screen. Incrementing the Excessive Collisions, Internal MAC Transmit 
Errors, or Carrier Sense Errors output error counters also causes the Output Errors counters to 
increment on the Interface Status screen. 

See the Port Status Summary screen in the previous section for screen entries not defined here. 
The counters are based on MIB RFC 1643. 
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Port Name: 
Interface: 
Protocol: 


Local Site 
LAN 

Ethernet 


Alignment Errors: 

FCS Errors: 

Frame Too Longs: 

Internal MAC Receive Errors: 
Single Collision Frames: 
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Deferred Transmissions: 

Late Collisions: 

Excessive Collisions: 

Internal MAC Transmit Errors: 
Carrier Sense Errors: 


Input 

1234567890 

1234567890 

1234567890 

1234567890 


Clear = [C] 






Output 


1234567890 

1234567890 

1234567890 

1234567890 

1234567890 

1234567890 

1234567890 


Exit = [X] 


Port Status (LAN) 


Screen Path 

Status and Test Menu 
Port Status 

* 

Port Status Summary 
Port 0 

* 

Port 0 Status 


Alignment Errors - received frames that are not an integral number of octets in length and do 
not pass the Frame Check Sequence (FCS) test. 

FCS Errors - received frames that are an integral number of octets in length but do not pass the 
Frame Check Sequence (FCS) test. 

Frame Too Longs - received frames that exceed the maximum permitted frame size. 

Internal MAC Receive Errors - received frames discarded due to an internal MAC sublayer 
receive error (Out of Buffers, Overruns). 
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Single Collision Frames - successfully transmitted frames on this interface for which 
transmission is inhibited by exactly one collision. 

Multiple Collision Frames - successfully transmitted frames for which transmission is inhibited 
by more than one collision. 

Deferred Transmissions - number of frames for which the first transmission attempt is delayed 
because the medium is busy. The count represented by an instance of this object does not include 
frames involved in collisions. 

Late Collisions - number of times that a collision is detected on this interface later than 512 
bit-times into the transmission of a frame. 512 bit-times corresponds to 51.2 microseconds on a 
10 Mbit/s system. A (late) collision included in a count represented by an instance of this object is 
also considered as a (generic) collision for purposes of other collision-related statistics. 

Excessive Collisions - number of frames for which transmission fails due to excessive collisions. 
Retry limit is exceeded. 

Internal MAC Transmit Errors - number of frames for which transmission fails due to an 
internal MAC sublayer transmit error. 

Carrier Sense Errors - number of times that the carrier was not sensed (Carrier Lost, Tx 
Underrun, Tx Heartbeat) when attempting to transmit a frame on this interface. The count is 
incremented at most once per transmission attempt, even if the carrier fluctuates during a 
transmission attempt. 
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4.5.2 Port Status (WAN, Frame Relay) 

See the Port Status screen for a port on the WAN interface . The protocol selected is Frame 
Relay. This screen is updated every two seconds. 

See the Port Status Summary screen for screen entries not defined here. 

The counters are based on MIB RFC 1315. 
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Port Name: 

Remote Site 1 

Interface: 

WAN 1 

Protocol: 

FR - Annex D 
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Link Downs: 

1234567890 


Input Output 

FECNs: 

1234567890 

BECNs: 
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Port Status (Frame Relay) 


Screen Path 

Status and Test Menu 
Port Status 

# 

Port Status Summary 
Port# 

# 

Port # Status 


DLCI - the Frame Relay Data Link Connection Identifier configured for the specified port. The 
DLCI identifies the logical link on a Frame Relay network and is assigned by the network 
provider. 

DLCI State - the configured status of the DLCI. 

DLCI Status - the operational status of the DLCI. 

System Up Time - the amount of time the unit has been operational 
(days :hours: minutes: seconds). 

Creation Time - the system time when DLCI was established (days:hours:minutes:seconds). If 
protocol is FR - No LMI, this is the first time the DLCI came up after being defined. 

Last Change - the system time when the DLCI was most recently changed. 

Link Downs - the number of times the DLCI has entered the link down state. This is mapped to 
the interface link downs counter for Frame Relay No LMI. 
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FECN - frames with the Forward Explicit Congestion Notification bit set. This bit is set when 
congestion (excess traffic) occurs between the router and the network. 

BECN - frames with the Backward Explicit Congestion Notification bit set. This bit is set when 
congestion (excess traffic) occurs within the network. 

Frames - all valid frames for this DLCI. This includes known protocol routed frames and bridged 
frames. 

Octets - all octets (bytes) in each frame, including the DLCI, control field, and RFC 1490 
encapsulation, but excluding the CRC. 

Encrypted Frames - number of encrypted frames on this port (only displayed if encryption 
hardware is present). 
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4.5.3 Port Status (WAN, PPP) 

The screen below is the Port Status screen for a port on the WAN interface. The protocol 
selected is PPP. This screen is updated every two seconds. 

Also view the LCP (Link Control Protocol), IPCP (IP Control Protocol), IPXCP (IPX Control 
Protocol), and BCP (Bridging Control Protocol) status screens. 

When any of these error counters increment, the Errors counters on the WAN Interface Status 
screen also increment. 

Encrypted Frames and the real time system clock are displayed only if encryption daughter card is 
present. 

See the Port Status Summary screen , for screen entries not defined here. 

The counters are based on MIB RFC 1471. 
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Screen Path 

Status and Test Menu 
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# 

Port Status Summary 
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# 

Port # Status 


Bad Addresses - LCP or NCP (Network Control Protocol) frames received with an incorrect 
Address Field. The address field should have a value of FF. 

Bad Controls - LCP or NCP frames received with an incorrect Control Field. The control field 
should have a value of 03. 

See LCP State for an explanation of the status conditions. 
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4.5.3.1 LCP Status 


Access the Port LCP Status screen to view the status of the Link Control Protocol (LCP) on 
ports with Point-to-Point Protocol selected. This screen is updated every two seconds. 

The counters on the LCP Status screen are based on RFC 1661. LCP allows negotiation of 
certain characteristics of a point-to-point link. When a configuration option is not included in a 
Configure Request packet, the default value for that option is assumed. 
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* 
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Three classes of LCP packets that configure, terminate, and maintain a link are described below. 
ESTABLISH AND CONFIGURE A LINK 

The following link configuration packets are used to establish and configure a link: 

Configure Requests - packets sent to open a connection. If a configuration option is not 
included in the packet, the default value for that configuration option is assumed. 

Configure Acks - responses to Configure Request indicating all values are recognizable and 
acceptable. 

Configure Nacks - responses to Configure Requests indicating all values are recognizable, but 
some are not acceptable. 

Configure Rejects - responses to Configure Requests indicating some values are not 
recognizable or acceptable. 
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TERMINATE A LINK 

The following link termination packets are used to terminate a link: 
Terminate Requests - packets sent to close a connection. 
Terminate Acks - responses to Terminate Requests. 


MANAGE AND DEBUG A LINK 

The following link maintenance packets are used to manage and debug a link: 

Code Rejects - LCP packets with an unknown code. 

Protocol Rejects - PPP packets with an unknown or unsupported protocol. 

Discard Requests - packets which provide a Data Link Layer sink mechanism used for 
debugging and performance testing. 

Echo Requests - packets which provide a mechanism used to determine if the remote unit is 
operational. 

Echo Replies - messages sent in response to Echo Requests. 

LCP State - the state of Link Control Protocol (based on RFC 1661). 

Initial - the lower layer is unavailable (Down), and no Open has occurred. The Restart 
timer is not running. 

Starting - the Open counterpart to the Initial state. An administrative Open has been 
initiated, but the lower layer is still unavailable (Down). 

Closed - the link is available (Up), but no Open has occurred. 

Stopped - the Open counterpart to the Closed state. It is entered when the system is 
waiting for a Down event or after sending a Terminate-Ack. 

Closing - an attempt made to terminate the connection. A Terminate-Request has been 
sent and the Restart timer is running, but a Terminate-Ack has not yet been received. 

Stopping - the Open counterpart to the Closing state. A Terminate-Request has been sent 
and the Restart timer is running, but a Terminate-Ack has not yet been received. 

Request Sent - an attempt made to configure the connection. A Configure-Request has 
been sent and the Restart timer is running, but a Configure-Ack has not yet been received. 

Ack-Received - a Configure-Request has been sent and a Configure-Ack has been received. 
The Restart timer is still running, since a Configure-Ack has not yet been sent. 

Ack-Sent - a Configure-Request and a Configure-Ack have both been sent, but a 
Configure-Ack has not yet been received. The Restart timer is running, since a 
Configure-Ack has not yet been received. 

Opened - a Configure-Ack has been both sent and received. 

Illegal - an event has occurred which has an internal error. 
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4.5.3.1.1 LCP Negotiable Options 


Access the LCP Negotiable Options screen to view the values of LCP negotiable options in 
configuration requests sent and received by the router. 

Negotiable options are based on RFCs 1661 and 1570. 

Negotiable option status is determined after negotiation has been completed and Interface Status 
is up. 

The Local field displays the option values in the last configuration request sent by the router. 

The Remote field displays the option values in the last configuration request received by the 
router. 
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Maximum Receive Unit - specifies the maximum number of octets in the Information and 
Padding fields. It does not include the framing, Protocol field, FCS, nor any transparency bits or 
bytes. It is currently fixed at 1526. 

Protocol Field Compression - provides a method to negotiate the compression of the PPP 
Protocol field. By default, all implementations must transmit packets with two-octet PPP 
Protocol fields. 
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4.5.3.2 IPCP Status 


IP Control Protocol (IPCP) is responsible for configuring, enabling, and disabling the IP protocol 
modules on both ends of a point-to-point link. IPCP uses the same packet exchange mechanism as 
the Link Control Protocol (LCP). IPCP packets are not exchanged until PPP has reached the 
Network-Layer Protocol phase. IPCP packets received before this phase is reached are 
discarded. 

The router sends the configured IP Address in the IPCP configure requests. If the remote peer 
rejects it, the router will stop insisting on it and remove the IP Address from the configure 
requests. 

The router does not attempt to assign an IP address to its peer and does not request or accept an 
IP address from its peer. In no event will the router force the remote to use the IP Address 
configured for its PPP port. That is, the router won't NAK the IP Address specified by the 
remote. 


If the two addresses do not match, then the link will work, IPCP will open, but IP may not route 
properly. If the remote peer Naks the IP Address, then it is stating that it wants the router to use 
the address it is specifying. In this case, the router will remove the IP Address from its IPCP 
configure requests but will not use the IP Address in the Peer's configure requests. 

See LCP Status for descriptions of counters. 

See LCP State for an explanation of the various State conditions. 

This screen is updated every two seconds. 
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Input 
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0000000000 

0000000000 

0000000000 

0000000000 


Output 
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0000000000 

0000000000 

0000000000 

0000000000 

0000000000 

0000000000 


IPCP State: 


Closed 
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4.5.3.3 IPXCP Status 


View the IPXCP Status screen to monitor IPX Control Protocol (IPXCP), which is responsible 
for configuring, enabling, and disabling the IPX protocol modules on both ends of the 
point-to-point link. 

IPXCP uses the same packet exchange mechanism as the Link Control Protocol. IPXCP packets 
are not exchanged until PPP has reached the Network-Layer Protocol phase. IPXCP packets 
received before this phase is reached are discarded. 

IPXCP Configuration Options allow modifications to the standard characteristics of the 
network-layer protocol to be negotiated. If a Configuration Option is not included in a 
Configure-Request packet, the default value for that Configuration Option is assumed. 

See LCP Status for descriptions of counters. 

See LCP State for an explanation of the various State conditions. 
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4.5.3.4 BCP Status 


The Bridging Control Protocol (BCP) is responsible for configuring, enabling and disabling the 
bridge protocol modules on both ends of the point-to-point link. 

BCP uses the same packet exchange mechanism as the Link Control Protocol. BCP packets are 
not exchanged until PPP has reached the Network-Layer Protocol phase. BCP packets received 
before this phase is reached are discarded. 

See LCP Status for descriptions of counters. 

See LCP State for an explanation of the various State conditions. 

This screen is updated every two seconds. 
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4.6 TCP/IP Status and Test Menu 


The TCP/IP Status and Test menu is the top-level screen from which the user selects: 

• Pimi/Trace Route 

• IP Status 

• ICMP Status 

• TCP and UDP Status 

• SNMP Status 

• ARP Table 

Select Ping/Trace Route to display the command line interface. 

4.6.1 Ping/Trace Route 

Use the ping command to verify if a gateway (router) or host is reachable from your router. 

Use the traceroute command to record (trace) routes from your router to a specified host or 
gateway (router). 

When you select Ping/Trace Route from the TCP/IP Status and Test Menu, the Ping/Trace Route 
screen appears. 

Invalid Commands 

If an invalid command is entered, the following message appears: 

Command is invalid. Type 'exit' to exit. 
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Ping/Trace Route 

IP Status 

ICMP Status 

TCP and UDP Status 

SNMP Status 

ARP Table 
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Ping Command 

The format for the ping command is: 

ping <address> 

where <address> is an IP address in either dotted decimal notation or hex notation 
(x7d00006d=125.0.0.109). 

When the ping command is entered and a response is received, the following is displayed: 

PING 125.0.0.109 
125.0.0.109 is alive, RTT=5ms. 

If no response is received within 5 seconds, the following message appears: 

PING 125.1.2.3 
Ping: No reply. 

If the destination is unreachable (i.e., no route), the following message appears: 

PING 1.2.3.4 

Destination unreachable (1.2.3.4) 

If you type ping without an address, the address from the last ping command will be used. If 
there is no previous ping in the current session, the invalid command message appears (see 
above). 

Traceroute Command 

The format for the traceroute command is: 

traceroute <address> 

where <address> is an IP address in either dotted decimal notation or hex notation 
(x7d00006d=125.0.0.109). 

When you enter traceroute <address>, a UDP message is sent out to a bad port (33467). Packets 
are sent in groups of 3. The first group has its TTL set to 1. This causes the first router to send 
back a ICMP TTL EXCEEDED message. The source address of the ICMP message and how 
long it took for it to come back is recorded. This same message is sent two more times to get a 
set of three round-trip-times to the first router. Then, the second group of three UDP messages is 
sent with a TTL of 2. This causes the second router in the trace to send back 
ICMP TTL EXCEEDED messages. This continues until the reply that we receive is an ICMP 
PORT UNREACHBLE instead of a ICMP TTL EXCEEDED. This indicates that the final 
destination has been reached. 

If a reply is not received within 5 seconds, the next packet is sent and a * is displayed in the time 
entry for the missed packet. Note the following examples. 

A simple traceroute of a host on the same network as the router would show something like: 

TRACEROUTE 125.0.0.109 
1 125.0.0.109 4 ms 3 ms 4 ms 

This indicates that the 3 packets in the group took 4, 3, and 4 ms. respectively. 

For a host that is multiple hops away, an output may look like: 

TRACEROUTE 131.143.16.1 


1 

125.0.0.75 

3 

ms 

4 

ms 

3 

ms 

2 

131.143.16.9 

91 

ms 

91 

ms 

90 

ms 

3 

131.143.16.1 

95 

ms 

95 

ms 

95 

ms 


- 66 - 



If the third packet from 131.143.16.1 had not been received, the last line of the output would look 
like: 

3 131.143.16.1 95 ms 95 ms 

0.0.0.0 * ms 

It is possible that all three packets in a group may not be received from the same router. This can 
occur if a router goes down during the traceroute. In this case, an output like this may appear: 

2 131.143.16.9 95 ms 

131.143.16.8 98 ms 99 ms 

This indicates that, for the second hop of the trace, a reply was received from 131.143.16.9 for 
the first packet in the group. The second and third packet replies came from 131.143.16.8. 

Help 

Enter help to re-display the command line interface. 

Exit 

Enter exit to return to the TCP/IP Status and Test Menu. 


( S 

I ROUTERmate Plus Command Line Interface 


Usage: 

ping (address) 
traceroute (address) 
help 
exit 


Commands> 


V - ' 

Ping/Trace Route Screen 
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4.6.2 IP Status 


The IP Status screen displays information and statistics for the Internet Protocol (IP) for all ports 
on the router which are configured for IP routing. Also access the IP Port Counters screen. This 
screen is updated every two seconds. 

The counters are based on MIB II RFC 1213. 
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IP 

Status 


Input Datagrams 


Output Datagrams 


Received: 

1234567890 

Request: 

1234567890 

Forwarded: 

1234567890 

No Route: 

1234567890 

Header Error: 

1234567890 

Fragmented Ok: 

1234567890 

Address Error: 

1234567890 

Fragment Failed: 

1234567890 

Unknown Protocol: 

1234567890 

Fragment Created: 

1234567890 

Delivered: 

1234567890 



Reassembly Timeout: 

1234567890 



Reassembly Required: 

1234567890 



Reassembled OK: 

1234567890 



Reassembly Failed: 

1234567890 



BootP Rx Messages: 

1234567890 



BootP Discards: 

1234567890 



IP Port Counters 
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Screen Path 

Status and Test Menu 
TCP/IP Status 

+ 

TCP/IP Status 
IP Status 

+ 

IP Status 


INPUT DATAGRAMS 

Received - input datagrams received, including those received in error. 

Forwarded - datagrams forwarded. 

Header Error - input datagrams discarded due to errors in their IP headers, including bad 
checksums, version number mismatch, other format errors, time-to-live exceeded, errors 
discovered in processing their IP options, etc. 

Address Error - input datagrams discarded because the IP address in their IP header's destination 
field was not a valid address to be received at the local router. This count includes invalid 
addresses (e.g., 0.0.0.0) and addresses of unsupported classes (e.g., Class E). 

Unknown Protocol - locally-addressed datagrams received successfully but discarded because of 
an unknown or unsupported protocol. 

Discarded - input IP datagrams for which no problems were encountered to prevent their 
continued processing, but which were discarded (e.g., for lack of buffer space). Note that this 
counter does not include any datagrams discarded while awaiting re-assembly. 
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Delivered - input datagrams successfully delivered to IP user-protocols (including ICMP, UDP, 
BootP, and TCP). 

Reassembly Timeout - the maximum number of seconds during which received fragments are 
held while they are awaiting reassembly. 

Reassembly Required - IP fragments received that are waiting to be reassembled. 

Reassembly Ok - fragmented IP datagrams received and successfully re-assembled. 

Reassembly Failed - failures detected during the re-assembly of fragmented datagrams. 

BootP Rx Messages - counter for received BootP Messages processed by the BootP Relay. This 
includes BootP requests from the client which are addressed to the BootP server UDP port. The 
BootP replies from the server are Routed to the Gateway router (the first router to receive the 
BootP request message from the Client) so the only router that counts BootP responses from the 
server is the Gateway Router. 

BootP Tx Messages - counter for forwarded BootP messages processed by the BootP Relay. 
This includes BootP requests from the client which are addressed to the BootP server UDP port. 
The BootP replies from the server are Routed to the Gateway router (the first router to receive 
the BootP request message from the Client) so the only router that counts BootP responses from 
the server is the Gateway Router. 

BootP Discards - counter for BootP messages discarded by the BootP Relay. This includes 
BootP messages discarded because of the BootP Threshold Seconds or BootP Threshold Hops 
options. It also counts BootP messages discarded because of errors. 


OUTPUT DATAGRAMS 

Request - IP datagrams which local IP user protocols (including ICMP) supplied to IP in requests 
for transmission. This counter does not include any datagrams counted in Input Datagrams 
Forwarded. 

Discarded - output IP datagrams for which no problem was encountered to prevent their 
transmission to their destination, but which were discarded (e.g., for lack of buffer space). This 
counter includes datagrams counted in Input Datagrams Forwarded if any such packets met this 
discard criterion. 

No Routes - IP datagrams discarded because no route could be found to transmit them to their 
destination. This counter includes any packets counted in Input Datagrams Forwarded which 
meet this ‘no-route’ criterion. It also includes any datagrams not routed because the default 
route is down. 

Fragmented Ok - IP datagrams that have been successfully fragmented for transmission. 

Fragment Failed - IP datagrams that have been discarded because they needed to be fragmented 
but could not be (e.g., because then - Don't Fragment flag was set). 

Fragment Created - fragments that have been created from the fragmented datagrams. 
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4.6.2.1 IP Port Counters 


Access the IP Port Counters screen from the IP Status screen. Use this screen to view the 
number of datagrams received and transmitted on each port configured for IP routing. 

This screen is updated every two seconds. 

Address - the address configured for the port is displayed or Unnumbered is displayed if a WAN 
port is in Unnumbered mode. 

Total IP Datagrams In - IP packets received on the specified port. 

Total IP Datagrams Out - IP packets transmitted out the specified port. 
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IP Port Counters 


Port Port Name 
0 Local Site 

1 Remote Site 

4 Remote Site 


Address 

ill.123.123.123 
123.121.131.141 
Unnumbered 


Datagrams In 
0000000000 
0000000000 
0000000000 


Datagrams Out 
0000000000 
0000000000 
0000000000 
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IP Port Counters 
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IP Port Counters 
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4.6.3 ICMP Status 


The ICMP Status screen displays information and statistics for the Internetwork Control Message 
Protocol (ICMP) for all ports on the router which are configured for IP routing. This screen is 
updated every two seconds. 

ICMP allows gateways (routers) to send error or control messages to other gateways or hosts; 
ICMP provides communication between the IP software on one machine and the IP software on 
another. 

The counters are based on MIB II RFC 1213. 

Errored - ICMP messages with ICMP-specific errors (bad ICMP checksums, bad length). 

Destination Unreachable - a message sent to the source indicating the datagram cannot be 
routed or delivered. 

Time Exceeded - a message sent to the source when a datagram is discarded because its hop 
count has reached zero. Each IP datagram contains a time-to-live counter, called a Hop Count. 
To prevent datagrams from circling the Internet forever, each router/gateway decrements the 
count and discards the datagram when it reaches zero. 

Parameter Problem - a message sent to the source indicating a problem with the datagram 
header. This message is only sent when the problem is so severe that the datagram must be 
discarded. 

Source Quench - a message sent to the original source requesting that it slow down its rate of 
sending datagrams. When datagrams arrive too quickly for a gateway or router to process, the 
datagrams are discarded. 
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Redirect - a message sent by a gateway to a router on a directly-connected network indicating a 
non-optimum route has been used. 

Echo Request - a message sent to test whether a destination is alive and reachable (Ping 
Request). 

Echo Reply - a message sent in response to an Echo Request (Ping Reply). 

Timestamp Request - a message sent requesting the destination device return its current value 
for the time of day. 

Timestamp Reply - a message returned to the device making a Timestamp Request. 

Address Mask Request - a message sent to request the subnet mask of a device. The router 
does not send this message. 

Address Mask Reply - a message returned to the device making an Address Mask Request. 
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4.6.4 TCP and UDP Status 


The TCP and UDP Status screen displays protocol information and statistics for all router ports 
that are configured for IP routing. Also access the TCP Connection Table. This screen is 
updated every two seconds. 

The protocols are TCP (Transmission Control Protocol) and UDP (User Datagram Protocol). 
The counters are based on MIB II RFC 1213. 
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TCP 


UDP 


Retransmission Minimum: 

1234567890 

Input Datagrams: 

1234567890 

Retransmission Maximum: 

1234567890 

No Ports: 

1234567890 

Maximum Connections: 

1234567890 

Input Errors: 

1234567890 

Active Opens: 

1234567890 

Output Datagrams: 

1234567890 

Passive Opens: 

1234567890 



Attempt Fails: 

1234567890 



Established Resets: 

1234567890 



Current Established: 

1234567890 



Input Segments: 

1234567890 



Output Segments: 

1234567890 



Retransmitted Segments: 

1234567890 



Received In Errors: 

1234567890 



Output RST Flags: 

1234567890 



TCP Connection Table: 

>> 

Select 

Menu = [CR] 
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TCP and UDP Status 


Screen Path 

Status and Test Menu 
TCP/IP Status 

+ 

TCP/IP Status 
TCP and UDP Status 

* 

TCP and UDP Status 


TCP COUNTERS: (Transmission Control Protocol) 

Retransmission Minimum - the minimum value permitted for the retransmission timeout value 
(milliseconds). 

Retransmission Maximum - the maximum value permitted for the retransmission timeout value 
(milliseconds). 

Maximum Connections - the limit on the total number of TCP connections supported. 

Active Opens - TCP connections made by the router. 

Passive Opens - TCP connections made to the router. 

Attempt Fails - attempted TCP connections that failed, including both those attempted by the 
router and to the router. 

Established Resets - resets received from established connections (a reset is made if the remote 
end is not connected). 
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Current Established - active TCP connections. 

Input Segments - segments received, including those received in error. This count includes 
segments received on currently established connections. 

Output Segments - segments sent, including those on current connections but excluding those 
containing only retransmitted octets. 

Retransmitted Segments - segments retransmitted - that is, the number of TCP segments 
transmitted containing one or more previously transmitted octets. 

Received in Errors - segments received in error (e.g., bad TCP checksums). 

Output RST Flags - resets sent from the router. 


UDP COUNTERS: (User Datagram Protocol) 

Input Datagrams - UDP datagrams received and delivered to UDP users. 

No Ports - received UDP datagrams for which there was no known application at the destination 
port. 

Input Errors - received UDP datagrams that could not be delivered for reasons other than the 
lack of an application at the destination port. 

Output Datagrams - UDP datagrams sent from the local router. 
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4.6.4.1 TCP Connection Table 


Access the TCP (Transport Control Protocol) Connection Table from the TCP and UDP Status 
screen. This screen displays MIB II information about the router's existing TCP connections. 

This screen is updated every five seconds. 

The counters are based on MIB II RFC 1213. 
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Local 

Connection State Address Port 

Listen 0.0.0.0 23 


Remote 

Address 
0 . 0 . 0.0 




Port 

0 
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TCP Connection Table 


Screen Path 

Status and Test Menu 
TCP/IP Status 

* 

TCP/IP Status 
TCP and UDP Status 

* 

TCP and UDP Status 
TCP Connection Table 

TCP Connection Table 


Connection State - status of this TCP connection. 

Closed 

Listen 

SynSent 

SynReceived 

Established 

Fin Wait 1 

FinWait2 

Close Wait 

LastAck 

Closing 

Time Wait 

Delete TCB (connection terminated) 

Local Address - local IP address assigned to the link. A connection in the listen state that is 
willing to accept connections for any port is set to O.O.O.O. 
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Local Port - local port number for this TCP connection. 
Remote Address - remote IP address for this TCP connection. 
Remote Port - remote port number for this TCP connection. 
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4.6.5 SNMP Status 


Use the SNMP Status screen to view the status of SNMP (Simple Network Management 
Protocol) messages. This screen is updated every two seconds. 

Press [C] to reset the counters to zero. 

In the following descriptions, an SNMP Protocol Data Unit (PDU) is SNMP information that is 
encapsulated in a UDP datagram. 

The counters are based on MIB II RFC 1213. 
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Traps: 
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TCP/IP Status 
SNMP Status 

* 

SNMP Status 

Packets - SNMP messages delivered between the local router and the transport service. 

Bad Versions - SNMP messages which were delivered that were for an unsupported SNMP 
version. 

Bad Community Names - SNMP messages delivered which used an unknown SNMP 
community name. 

ASN Parse Errors - the total number of ASN.l or BER errors encountered by the SNMP 
protocol entity when decoding received SNMP messages. 

Bad Community Uses - SNMP messages delivered that represented an SNMP operation which 
was not allowed by the SNMP community named in the message. 

Too Bigs - SNMP PDUs for which the value of the error-status field is ‘too big.’ 

No Such Names - SNMP PDUs for which the value of the error-status field is ‘noSuchName.’ 

Bad Values - SNMP PDUs for which the value of the error-status field is ‘badValue.’ 
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Read Onlys - valid SNMP PDUs that were delivered for which the value of the error-status field 
is ‘readonly.’ It is a protocol error to generate an SNMP PDU which contains the value 
‘readonly’ in the error-status field, as this object is provided as a means of detecting incorrect 
implementations of the SNMP Working Group. 

Gen Errors - SNMP PDUs for which the value of the error-status field is ‘genErr.’ 

Get Requests - SNMP Get-Request PDUs. 

Get Nexts - SNMP Get-Next PDUs. 

Set Requests - SNMP Set-Request PDUs. 

Get Responses - SNMP Get-Response PDUs. 

Traps - the number of traps sent. 

Total Request Variables - MIB objects delivered successfully as the result of receiving valid 
SNMP Get-Request and Get-Next PDUs. 

Total Set Variables - MIB objects which have been altered successfully as the result of valid 
SNMP Set-Request PDUs. 
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4.6.6 ARP Table 


Access the ARP Table to view IP addresses and corresponding MAC addresses for devices with 
which the router has communicated recently. 

The router uses Address Resolution Protocol (ARP) to dynamically learn the MAC address of a 
destination router or host on the same physical network. A receiver updates its ARP table before 
processing an ARP packet. This screen is updated every five seconds. 

Page Down/Up prompts appear when there are more than 15 entries in the table. 

The counters are based on MIB II RFC 1213. 

Press [F] to clear the table. 
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Network Address 

125.0.1.1 

125.0.0.1 

125.0.0.2 

125.100.0.88 

125.0.1.4 

125.0.0.5 

125.0.0.6 
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Age 

Dynamic 

0060 

Dynamic 

0060 

Dynamic 

0060 

Dynamic 

0120 

Dynamic 

0180 

Dynamic 

3480 

Dynamic 

0120 

Dynamic 

0009 

Dynamic 

0060 

Dynamic 

0120 

Dynamic 

0180 

Dynamic 

0180 

Dynamic 

0060 

Dynamic 

0060 

Dynamic 

0060 
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Status and Test Menu 
TCP/IP Status 

+ 

TCP/IP Status 
ARP Table 

+ 

ARP Table 


Physical Address (48-bit hex) - the physical Media Access Control (MAC) address. 
Network Address - IP address corresponding to the physical MAC address. 

Type - the address as one of the following: 

Invalid - no response to an ARP request was received. 

Dynamic - the IP address for this router was learned automatically from an ARP message. 
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Age - number of seconds since the last ARP packet was received. 

• The ARP timer is incremented once a minute for Dynamic entries and once a second for 
Invalid entries. 

• An Invalid entry is one that is waiting for an ARP reply. 

• The timeout for Invalid entries is set at 2 seconds with 3 retries. Dynamic entries are 
maintained in the list for 60 minutes. If they are not updated within that limit, they are deleted. 


- 80 - 



4.7 IPX Status 


The IPX Status screen is the top-level screen from which you can access and view the status of 
ports on which IPX routing is enabled. This screen is updated every two seconds. 


NOTE 

Only ports with IPX routing enabled are displayed. 


To view the IPX status of a particular port, position the cursor on that port number and press 
[CR], 

Press [C] to clear all counters on the IPX, RIP/SAP, and IPXWAN screens. 
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Port Port Name 


Address 


Packets In Packets Out 


0 Local Site 

1 Remote Site 

4 Remote Site 


12345678:123456789012 0000000000 
10000000:123456789012 0000000000 
Unnumbered 0000000000 


0000000000 

0000000000 

0000000000 
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Screen Path 

Status and Test Menu 
IPX Status 

* 

IPX Status 

Port - port number (0-14) for ports with IPX enabled. 

Port Name - free-text description that is assigned at the Port Configuration screen for this port. 

Address - 32-bit hexadecimal IPX network number that is assigned at the IPX Routing Options 
screen for this port, followed by the 48-bit hexadecimal value for the Node Number that is 
permanently assigned to the same value as the MAC address for the LAN interface. 

Unnumbered is displayed if a WAN port is in unnumbered mode. 

If IPXWAN is enabled, the network number may be a number assigned by IPXWAN 
instead of the number configured for the port. IPXWAN assigns the primary network 
number based on the master/slave relationship. If the local and remote router’s WAN ports 
have different IPX network numbers, then the master unit will assign an IPX network 
number to the slave. 

Packets In - total IPX packets received on the specified interface. 

Packets Out - total IPX packets transmitted out the specified interface. 
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4.7.1 IPX Status (LAN and WAN) 

The Port IPX Status screen (LAN and WAN) displays information and statistics for the 
Internetwork Packet exchange Protocol (IPX) for ports on the LAN and WAN interfaces. This 
screen is updated every two seconds. 


NOTE 

The screens for LAN and WAN are identical except for the parameters indicated. 


Two columns display various counters for received or transmitted frames, as follows: 

• Input - applies to received IPX packets. 

• Output - applies to transmitted IPX packets. 


This screen also provides access to the RIP/SAP Status and IPXWAN Status screens (WAN 
only). 
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Port 0 IPX Status 


Total IPX Packets: 


Input 

00000000 

Packets To Route: 


00000000 

No Route: 


00000000 

Hop Count Too Large: 


00000000 

Packets In Error: 


00000000 

Packets Too Long: 


00000000 

Type 20 Packets: 


00000000 

Type 20 Hop Count Too 

Large: 

00000000 

Diagnostic Packets Filtered: 

00000000 

Serialization Packets 

Filtered: 

00000000 

RIP/SAP Status: 


>> 


Output 

0000000000 


0000000000 
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Port IPX Status (LAN) 


Screen Path 

Status and Test Menu 
IPX Status 

+ 

IPX Status 
Port 0 

* 

Port 0 IPX Status 

Total IPX Packets - IPX Packets on this port. This counter does not include Packets In error or 
Packets Too Long. 

Packets To Route - total packets received that required routing. 

No Route - packets received via the port that could not be forwarded because a path to the 
network is not known. 
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Hop Count Too Large - packets received on the port that were discarded because the transport 
control field (hop count) was greater than 14. 

Packets In Error - packets with an invalid Type field or an incorrect packet length field. 


Packets Too Long - packets received that were too long (based on the IPX header length field 
and the actual packet length). 

Type 20 Packets - Novell encapsulated Netbios packets on the specified virtual IPX port. 

Type 20 Hop Count Too Large - Netbios packets received on the port that were discarded 
because the hop count was too large. Type 20 packets received with a Transport Control field of 
8 or greater are discarded. 

Diagnostic Packets Filtered (LAN only) - diagnostic packets filtered due to the Diagnostic 
Packets option on the port IPX Filters screen. 

Serialization Packets Filtered (LAN only) - serialization packets filtered due to the Serialization 
Packets option on the port IPX Filters screen. 


Watchdog Requests Spoofed (WAN only) - the number of Watchdog Requests received on this 
port which were not forwarded due to watchdog spoofing. See the Watchdog Packets option on 
the port IPX Filters screen . 
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Port 1 IPX Status 


Total IPX Packets: 


Input 

00000000 

Packets To Route: 


00000000 

No Route: 


00000000 

Hop Count Too Large: 

00000000 

Packets In Error: 


00000000 

Packets Too Long: 


00000000 

Type 20 Packets: 


00000000 

Type 20 Hop Count 

Too Large: 

00000000 

Watchdog Requests 

Spoofed: 

00000000 

RIP/SAP Status: 


>> 

IPXWAN Status: 


>> 


Output 

0000000000 


0000000000 
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Select Menu = [CR] 
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Port IPX Status (WAN) 


Screen Path 

Status and Test Menu 
IPX Status 

+ 

IPX Status 
Port 1 

* 

Port 1 IPX Status 
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4.7.1.1 IPX RIP/SAP Status (LAN and WAN) 

The Port IPX RIP/SAP Status screen displays statistics counters on SAP (Service Advertising 
Protocol) and RIP (Routing Information Protocol) packets for ports on the LAN and WAN 
interfaces. This screen is updated every two seconds. 

SAP/RIP Responses Input: the total number of RIP/SAP responses received. 

SAP/RIP Responses Output: the total number of solicited RIP/SAP responses (sent in response to 
a general and specific requests). This does not include unsolicited responses such as triggered 
updates or periodic updates. 

SAP/RIP General Requests - general queries. 

SAP/RIP Specific Requests - specific queries. 

SAP/RIP Responses - general responses. 

SAP Get Nearest Requests - nearest queries. 

SAP Get Nearest Responses - nearest responses. 

SAP/RIP Periodic Update - periodic router broadcasts. 

SAP/RIP Triggered Update - update router broadcasts. 
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Port 0 IPX RIP/SAP Status 





Input 

Output 

SAP General Requests: 

0000000000 

0000000000 

SAP Specific Requests: 

0000000000 


SAP Responses: 

0000000000 

0000000000 

SAP Get Nearest Requests: 

0000000000 


SAP Get Nearest Responses: 


0000000000 

SAP Periodic Update: 


0000000000 

SAP Triggered Update: 


0000000000 

RIP General Requests: 

0000000000 

0000000000 

RIP Specific Requests: 

0000000000 


RIP Responses: 

0000000000 

0000000000 

RIP Periodic Update: 


0000000000 

RIP Triggered Update: 


0000000000 
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Port IPX RIP/SAP Status (LAN and WAN) 


Screen Path 

Status and Test Menu 
IPX Status 

+ 

IPX Status 
Port # 

+ 

Port # IPX Status 
RIP/SAP Status 

* 

Port # IPX RIP/SAP Status 
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4.7.1.2 IPXWAN Status 


IPXWAN is a protocol developed by Novell and specified in RFC 1634. The purpose of 
IPXWAN is to provide a common way of exchanging router to router information across different 
type of wide area links. RFC1634 describes how Novell IPX operates over various WAN media 
using the IPXWAN protocol. 

Support for IPXWAN is only provided to allow the router to be compatible with Novell routers. 

It is not required to route IPX and should be disabled unless it is required. The default is 
disabled. 


NOTE 

IPXWAN must be set to the same value on both ends of a connection. If it is not set to the 
same value, then the router will not be able to communicate across the link. 


There are two steps in the IPXWAN operation: 

1. Negotiate master/slave role. 

2. Exchange router configuration information. 

After these steps are concluded, transmission of IPX routing packets begins. 
This screen is updated every two seconds. 


Counter definitions are based on RFC 1634. 
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Port 1 IPXWAN Status 


Timer Requests: 

Timer Responses: 
Information Requests: 
Information Responses: 
Nacks: 

Bad Packets: 


Input 

0000000000 

0000000000 

0000000000 

0000000000 

0000000000 

0000000000 


Output 

0000000000 

0000000000 

0000000000 

0000000000 

0000000000 


IPXWAN State: Down 

Role: - 



Clear = [C] 


Exit = [X] 



Port IPXWAN Status (WAN) 


Screen Path 

Status and Test Menu 
IPX Status 

+ 

IPX Status 
Port # 

Port # IPX Status 
IPXWAN Status 

+ 

Port # IPXWAN Status 
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Timer Requests - a packet sent from both sides after link establishment which starts a timer and 
waits for a Timer Response. These packets are exchanged every 20 seconds until a response is 
received or a decision is made that the remote node is not responding. 

Timer Responses - the reply to a Timer Request. This packet verifies each option in the Timer 
Request packet. 

Information Requests - data packets sent (Master) after the peers have exchanged Timer 
Request and Response packets and negotiated options. 

Information Responses - data packets received (Slave) after the peers have exchanged Timer 
Request and Response packets and negotiated options. 

Nacks - received IPXWAN packets that were not acceptable. Either the received packet type 
was invalid or not recognized, or a badly-formed IPXWAN packet was received. 

Bad Packets - illegal packets received. 

IPXWAN State - status of the negotiation. 

Disabled', the IPXWAN option is disabled. 

Down : negotiation failed. 

Negotiating Timer, negotiating timer packets. 

Negotiating Information : negotiating Information packets. 

Up: negotiation complete. 

Role - function of the local router. Upon receiving a Timer Request packet, the router determines 
its role for the remainder of the IPXWAN exchanges. This parameter is only used during 
IPXWAN initial negotiation to determine master/slave roles. The router with the higher Internal 
Network Number is the master. 

Master, the requestor in the packet exchange. 

Slave: the responder in the packet exchange. 

Dashes (-) displayed when the State is not Up. 

Refer to RFC 1634 for details of these counters. 
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4.8 Bridging Status 

Access the Bridging Status screen to view a summary of received, discarded, and transmitted 
frames of ports on which bridging is enabled. This screen is updated every two seconds. 

To display the status screen for any displayed port, move the cursor to the desired port and press 
[CR], 

Port - port number (0-14) for ports with bridging enabled. 

Port Name - free-text description that is assigned at the Port Configuration screen for this port. 
In Frames - total frames received. 

Discards - total frames discarded. 

Out Frames - total frames sent. 
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Bridging Status 


Port Port Name 

0 Local Site 

1 Remote Site 

4 Remote Site 


In Frames 
0000000000 
0000000000 
0000000000 


Discards 

0000000000 

0000000000 

0000000000 


Out Frames 
0000000000 
0000000000 
0000000000 
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Screen Path 

Status and Test Menu 
Bridging Status 

* 

Bridging Status 
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4.8.1 Port Bridging Status 

Access the Port Bridging Status screen to display bridging status information for a specific port. 
This screen is updated every two seconds. 

• Input - Received bridged frames. 

• Output - Transmitted bridged frames. 
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Port 0 Bridging Status 


Total Frames: 

Too Shorts: 

Normal Discards: 
Address Discards: 

Loop Discards: 
Restricted Discards: 
Flood Discards: 

Total Discards: 

Transmit Filtered: 
Blocked or Discarded: 
Forwarded: 

Flooded: 

Total Forwarded: 


Input Output 

1234567890 

0000000000 

0000000000 

0000000000 

0000000000 

0000000000 

0000000000 

0000000000 

1234567890 

0000000000 

0000000000 

0000000000 

0000000000 




Clear 


V 


[C] 


Exit = [X] 


Port Bridging Status 


Screen Path 

Status and Test Menu 
Bridging Status 

# 

Bridging Status 
Port# 

# 

Port # Bridging Status 


Total Frames - frames sent/received on this port. 

Too Shorts - frames on this port that were discarded because they were too short. 

Normal Discards - frames on this port that were destined for the same port. This is normal. 

Address Discards - frames discarded due to source or destination entries in the address table 
being marked as ‘filter.’ 

Loop Discards - frames received from the wrong port. The port that the frame was received on 
was different than the port the source address was associated with in the Bridging Table. 

Restricted Discards - frames discarded due to setting the forwarding mode to ‘restricted.’ If a 
frame is received by the bridge and its header does not contain the address of a device in the 
forwarding table, the frame is discarded and this counter is incremented. 

Flood Discards - frames discarded on this port due to Flood limiting. Flooding of received 
frames with an unknown destination address is 5 frames per second. 
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Total Discards - total frames discarded on this port. 

Transmit Filtered - frames that were not forwarded on this port due to action of one of the 
‘type’ filters. 

Blocked or Discarded - frames that were dropped and not delivered on this port. The purpose of 
this counter is to attempt to count frames which are dropped by the high level WAN driver inside 
of the unit. This counter will tick when a frame is delivered toward a WAN port, but that port 
cannot deliver the frame because the port is down or congested. 

Forwarded - frames forwarded to a destination on this port. 

Flooded - frames transmitted on this port that were broadcast (flooded) to a destination with an 
unknown location. 

Total Forwarded - frames forwarded on this port. 
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4.9 IP Routing Table 

Access the IP Routing Table to view all of the known destination networks. All fields are read 
only. Static routes are configured from the IP Global Configuration screen . 

The IP routing table contains the information used to decide where to forward IP packets. If RIP 
(Routing Information Protocol) is enabled, this data is exchanged with adjacent routers. 

For both RIP vl and RIP v2, subnet routes are only advertised on ports that are on the same 
subnetted network. Subnet routes are hidden or summarized when advertised on a port that is on 
a different network. Host routes are not supported; any host routes received are discarded 

This screen is updated every 30 seconds. Press [CR] to update the screen manually. The routes 
are listed in numerical order. 

Page Down/Up prompts appear when there is more than one page of entries. 

Type [F] to delete all learned entries. 
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IP Routing Table 


Page 1 


Destination 

Subnet Mask 

Next Hop 

Hops 

Port Type 

Age 

118.0.0.0 

255.0.0.0 


1 

2 

Dir 


117.0.0.0 

255.0.0.0 


1 

3 

Dir 


128.0.0.0 

255.255.0.0 

118.0.0.12 

2 

2 

RIPvl 

10 

129.102.0.0 

255.255.0.0 

118.0.0.12 

4 

2 

RIPvl 

20 

139.102.0.0 

255.255.0.0 

118.0.0.12 

5 

2 

RIPvl 

12 

149.102.0.0 

255.255.0.0 

118.0.0.12 

14 

2 

RIPvl 

26 

159.102.0.0 

255.255.0.0 

118.0.0.12 

4 

2 

RIPvl 

5 

169.102.0.0 

255.255.0.0 

118.0.0.12 

9 

2 

RIPvl 

1 

105.0.0.0 

255.0.0.0 

117.0.0.101 

2 

3 

Stat 


108.0.0.0 

255.0.0.0 

117.0.0.101 

2 

3 

Stat 
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[CR] 

Cursor Up = 

[Backspace] 

Flush = [F] 



Exit = 

[X] 
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IP Routing Table 


Screen Path 

Status and Test Menu 
IP Routing Table 

* 

IP Routing Table 


Destination - when an IP packet to be routed is received, its destination address is compared to 
the destination address in the routing table. The matching entry in the table is used to determine 
which port the packet will be forwarded on. 

If no matching destination address is found in the IP routing table, the packet is sent to the default 
route address. The default route address is configured at the IP Global Configuration screen. If 
no default route address is configured, the packet is discarded. 

Configure the destination address for a static entry at the Global IP Static Route screen. 
Configure the destination address for a direct entry at the Port IP Routing Options screen. The 
destination address for a RIP entry is learned from the value contained in the RIP update message. 
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Subnet Mask - this is used in conjunction with the destination address to indicate if the route is a 
network, subnetwork, or host route. Configure the subnet mask for a direct entry at the Port IP 
Routing Options screen. Configure the subnet mask for a static entry at the Global IP Static 
Route screen. 

The subnet mask for a RIP vl entry is the default address class mask unless the entry is for the 
subnet that the router is directly connected to. The subnet mask for a RIP v2 entry is the mask 
specified in the routing message. 

Next Hop - the address of another router that leads to the destination network. The Next Hop 
address for a Direct route is blank since packets destined for a directly-connected network do not 
need to be sent to another router, they are delivered to the ultimate destination by the router. 

The Next Hop address for a Static route that points out the LAN is configured in the IP Static 
Route Table screen. The Next Hop address is set to 0.0.0.0 for static routes that point towards 
the WAN for Unnumbered Mode and Numbered Mode. 

The Next Hop address for a RIPvl route learned from the LAN or a WAN in numbered mode is 
the source address of the packet the routing message was received from. 

The Next Hop address for a RIPv2 route learned from the LAN or a WAN in numbered mode is 
the address specified in the routing message. If this address is not valid or 0.0.0.0, then the Next 
Hop address is the source address of the packet the routing message was received from. 

The Next Hop address is set to 0.0.0.0 for a RIPvl route learned on a WAN in Unnumbered 
Mode. The Next Hop address for a RIPv2 route learned from a WAN in unnumbered mode is the 
address specified in the routing message. 

Hops - this field indicates how many hops (intervening routers) it takes to reach the destination 
network. If multiple routes to a network are received, the Routermate Plus will select (learn) the 
one with the lowest number of hops. The Hops value for a Direct entry is configured on the Port 
IP Routing Options screen. The Hops value for a Static entry is configured on the IP Static 
Route Table screen. The Hops value for a RIP entry is the sum of the metric value configured for 
the port that the routing update message was received on and the metric value reported in the 
routing update message. The Hops value advertised is equal to the value shown. (Range is 1- 16) 

Port - the port used to reach the destination network. The port for a direct entry is determined by 
which port the destination address is associated with. The port for a static entry is determined by 
which port is entered on the Static Route configuration screen. The port for a RIP entry is the 
port that received the RIP update message. 

Type - specifies the location of the destination network, whether it was configured or learned, 
and the route’s status. 

Dir (Direct) - the local router is directly connected to the destination network. Direct 
routes are configured at the Port IP Routing Options screen. 

Stat (Static) - a route to a remote destination network; this route is configured in the local 
router and overrides RIP routes. Configure static routes on the Global IP Static Route 
screen. 

RIPvl or RlPv2 (Routing Information Protocol) - a route to a remote destination network; 
the route was learned from a RIP update message. The RIP version number (vl or v2) 
indicates the version of routing update message the route was learned from. 

INV (Invalid) - the garbage collection timer is running and the route is in the process of 
being deleted. The metric is always 16 for an invalid route. 
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Age - (range 1-999 seconds) the Age field counts the number of seconds since the last update for 
each RIP entry in the routing table. When an update is received, the Age field is reset to zero. 
When the Age reaches a value equal to the RIP Route Aging Timer the metric changes to a value 
of 16. When the Age reaches a value equal to the RIP Route Delete Delay Timer the entry is 
deleted from the routing table. 

When the aging timer reaches 180 seconds, the metric for the route is set to 16, which results in 
the destination being advertized as un-reachable. If the aging timer reaches a value equal to an 
internal delete-delay timer (120-second ‘Garbage Collection Timeout’ the entry is deleted from 
the routing table. 
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4.10 IPX Routing Table 

Access the IPX Routing Table to view all of the known destination networks. All fields are read 
only. 

The IPX routing table contains information used to decide where to forward IPX packets. This 
information is also exchanged with adjacent routers using the IPX Routing Information Protocol 
(RIP). 

The routes are listed in numerical order. This screen is updated every 30 seconds. Press [CR] to 
update the screen manually. 

Page Down/Up prompts appear when there is more than one page of entries. 

Type [F] to delete all learned entries. 
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Destination 

Next Hop 

Hops 

Delay 

Port 

Type 

Age 

ABC00001 


0 

11 

0 

Dir 


ABC00002 


0 

11 

1 

Dir 


ABC00003 

ABC00001.08000E000123 

10 

11 

0 

RIP 

30 

ABC00004 

ABC00001.08000E000123 

10 

11 

0 

RIP 

1115 

ABC00005 

AC000002.000000012e21 

10 

11 

1 

RIP 

30 

ABC00006 

AC000002.000000012e21 

10 

65535 

1 

RIP 

1115 
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IPX Routing Table 


Screen Path 

Status and Test Menu 
IPX Routing Table 

+ 

IPX Routing Table 


Destination - the 32-bit hex IPX network number for the network that can be accessed. When an 
IPX packet to be routed is received, its destination address is compared to the destination address 
in the routing table. The matching entry in the table is used to determine which port the packet 
will be forwarded on. 

If no matching destination address is found in the IPX routing table, the packet is discarded. 

Configure the destination address for a direct entry at the Port IPX Routing Options screen. The 
destination network for a RIP entry is learned from the value contained in the RIP update packet. 
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Next Hop - hex address of the next router in the path to the destination network in the form of 
32-bit network number plus 48-bit node number. The Next Hop address for a Direct entry is 
blank since packets destined for a directly-connected network do not need to be sent to another 
router, they are delivered to the ultimate destination by the router. The Next Hop address for a 
RIP entry learned from the LAN or a WAN in numbered mode or unnumbered mode is the source 
address of the packet the routing message was received from. 

Hops - this field indicates how many hops (intervening routers) it takes to reach the destination 
network. The range is 1 - 16. The hops value for a direct entry is 0. The hops value for a RIP 
entry is the value reported in the routing update message. The hops value advertised is equal to 
the value displayed, plus 1. 

Delay - indicates an estimate of how much time, in ticks, that a 576-byte packet takes to reach the 
destination network. If multiple routes to a network are received, the Routermate Plus will select 
(learn) the one with the lowest number of ticks. If two routes exist with equal ticks, the route 
with the lowest number of hops will be selected. A time tick is approximately 1/18 second or 
55ms. The range is 1 - 65535. 

The Delay value for a LAN directly-connected route is configured by the Transport Time 
parameter on the Port IPX Routing Options screen. 

The Delay value for a WAN directly-connected route depends on the setting of the IPXWAN 
option parameter on the Port IPX Routing Options screen. If IPXWAN is disabled (default), then 
the value configured by the Transport Time parameter on the Port IPX Routing Options screen is 
displayed. If IPXWAN is enabled, then the value calculated by IPXWAN is displayed. 

The delay value for a RIP entry is equal to the value reported in the routing update message. The 
delay value advertised is equal to the value displayed plus the delay for the port it is advertised 
out. 

Port - the port used to reach the destination network. The port for a direct entry is determined 
by which port the destination address is associated with. The port for a RIP entry is the port on 
which the RIP update packet was received. 

Type - the type specifies the location of the destination network. Valid options: 

Dir (Direct) - the local router is directly connected to the destination network. Direct 
routes are configured at the Port IPX Routing Options screen. 

RIP (Routing Information Protocol) - a route to a remote destination network; the route 
was learned from a RIP update packet. 

Age - the number of seconds since the last RIP update packet was received for each RIP entry in 
the routing table. When a RIP update packet is received, the timer for the age field is reset to 
zero. When the aging timer reaches the time configured for the RIP Age Timer at the Port IPX 
Routing Options screen, the entry is deleted from the routing table. The default is 180 seconds. 
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4.11 IPX Services Table 


Access the IPX Services Table to view all of the known servers. SAP (Service Advertising 
Protocol) is an IPX protocol that is used to advertize various Novell application services offered 
by such devices as file servers and printer servers. Routers exchange service information, which is 
added to each router's service table. The service table is used to inform the clients about the 
available servers. 


This screen is updated every 30 seconds. Press [CR] to update the screen manually. 
Page Down/Up prompts appear when there is more than one page of entries. 

Type [F] to delete all learned entries. 
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Type 

Server Name 

Server Address 

Hops 

Port 

Age 

1234 

12345678901234567890 

ABCD0003:08000E000123:00E1 

1 

0 

22 

104C 

12345678901234567890 

ABCD0003:08000E000123:00E1 

10 

1 

10 

104D 

1234567890123456789012345 

ABCD0003:08000E000123:00E1 

10 

1 

999 
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IPX Services Table 


Type- a 16-bit (4-character) hexadecimal value representing the type of service. Each server 
type is identified by a value assigned by Novell. There are values for standard types such as file 
server and print server, and for proprietary vendor's equipment such as HP Laserjet. 

Server Name - a unique 48-character name assigned to the server type (e.g .,file server, print 
server, print queue server). 

The router retrieves this name from the incoming SAP update packet and displays the first 24 
characters. 

Server Address - the full IPX address of the destination server, in the form (hex): 

32-bit network : 48-bit Node address : 16-bit Socket 
This information is obtained from the incoming SAP update message. 
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Hops - the number of intervening routers to the destination service. The value displayed is equal 
to the value reported in the SAP update message. The hops value advertised is equal to the value 
displayed, plus 1. 

Port - number for the port on which the SAP update message was received. 

Age - the number of seconds since the last SAP update packet was received for each entry in the 
table. When a SAP update packet is received, the timer for the age field is reset to zero. When 
the aging timer reaches the time configured for the SAP Age Timer at the Port IPX Routing 
Options screen (default is 180 seconds), the entry is deleted from the IPX Services Table. 
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4.12 Bridging Table 

Access the Bridging Table to display all learned and static MAC addresses for all ports for which 
bridging is enabled. 

This screen is updated every 30 seconds. Press [CR] to update the screen manually. 

Page Down/Up prompts appear when there are more than 12 entries in the table. 

Press [F] to delete all learned entries. 

Press [C] to reset Maximum Entries to the current value. 
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Page Up = [-] 
Page Down = £+] 


V 


Bridging Table 


Page 1 


Type 

MAC Address 

Action 

Port 

Static 

00:00:6d:00:30:00 

Filter 

— 

Static 

00:00:6d:00:30:01 

Filter 

— 

Static 

00:00:6d:00:30:02 

Forward 

2 

Static 

00:00:6d:00:30:03 

Forward 

1 

Learned 

00:00:6d:00:30:04 

Forward 

1 

Learned 

00:00:6d:00:30:05 

Forward 

1 

Learned 

00:00:6d:00:30:06 

Forward 

1 

Learned 

00:00:6d:00:30:07 

Forward 

1 

Learned 

CO 

o 

o 

CO 

o 

o 

VO 

o 

o 

o 

o 

Forward 

1 

Learned 

00 : 00:6d:00:30:09 

Forward 

1 

Learned 

o 
\— 1 

o 

CO 

o 

o 

VO 

o 

o 

o 

o 

Forward 

1 

Learned 

\— 1 
\— 1 

o 

CO 

o 

o 

73 

VO 

o 

o 

o 

o 

Forward 

1 


Current Entries: 

0020 



Maximum Entries: 

0035 



Clear = [C] 
Flush = [F] 


Update = [CR] 
Exit = [X] 


Bridging Table 


Screen Path 

Status and Test Menu 
Bridging Table 

+ 

Bridging Table 


Type - how the address was entered, as follows: 

Static - the address has been manually entered in the bridging Static Address Table. 

Learned - the address is automatically learned. 

MAC Address - the 48-bit hexadecimal Ethernet address that is permanently assigned to each 
device communicating on an Ethernet LAN. 

Action - how the bridge handles frames that are either destined to, or sourced from, the specified 
MAC address, as follows:. 

Filter - all frames to or from the specified MAC address are filtered (not forwarded). 

Forward - frames that contain the specified MAC address in the frame's destination field are 
forwarded to this port; frames that contain the specified MAC address in the source field 
should be received on this port. 

Filtering is configured as a global bridging option in the bridging Static Address Table. 
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Port - location where frames are forwarded based on their destination address. Frames containing 
the specified MAC address in the source field will be received on this port. Frames received by 
the bridge containing the specified MAC address in the destination field will be forwarded to this 
port. The Port value is ignored and dashes (—) are displayed when the ‘Action’ is set to Filter. 

Port numbers either are configured in the Static Address Table or are learned automatically. 
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4.13 Event Log 

The Event Log screen records all statistical and error messages that occur during startup and 
operation. The maximum number of events is 45. The most recent event is shown first. 



Event Log 


Screen Path 

Main Menu 
Event Log 

+ 

Event Log 
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5 . 


CONFIGURATION 

SCREENS 


Start of Document 


• 5.1 Screen Structure, Configuration 

• 5.2 Configuration Menu 

• 5.3 Interface Configuration Summary 

□ 5.3.1 LAN Configuration 

□ 5.3.2 WAN Configuration 

■ 5.3.2.1 WAN Protocol Options (Frame Relay) 

• 5.4 Port Configuration Summary 

□ 5.4.1 Port Configuration 

■ 5.4.1.1 IP Routing Options (LAN) 

■ 5.4.1.2 IP Routing Options (WAN) 

■ 5.4.1.3 IP Filters 

■ 5.4.1.3.1 IP RIP Input/Output Filters 

■ 5.4.1.4 IPX Routing Options 

■ 5.4.1.5 IPX Filters 

■ 5.4.1.5.1 IPX SAP Input/Output Filters 

■ 5.4.1,5.2 IPX RIP Input/Output Filters 

■ 5.4.1.6 Bridging Options 

■ 5.4.1.6.1 Transmit Filters 

■ 5.4.1.7 Encryption Options (Frame Relay and PPP) 

• 5.5 Global Configuration 

□ 5.5.1 IP Global Configuration 

■ 5.5.1.1 IP Static Routes 

■ 5.5.1.2 IP RIP Neighbor List Table 

□ 5.5.2 IPX Global Configuration 

□ 5.5.3 Bridging Global Configuration 

■ 5.5.3.1 Bridging Static Addresses 

□ 5.5.4 PPP Global Configuration 

□ 5.5.5 Encryption Global Configuration 


This section illustrates and describes the router's configuration screens. Access these screens to 
configure the router's operational parameters to suit your application. This text also serves as a 
reference tool for defining the parameters and options displayed on the screens. 

After reading this section, the user will be able to locate specific configuration screens and 
understand the contents and purpose of each. 
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5.1 Screen Structure, Configuration 

The organization of the Configuration screens is shown below. 


Terminal 

Selection 


password 


Main 

Menu 


Configuration 

Menu 


Interface 

Configuration —i 
Summary I 


LAN Configuration 


Port 

Configuration 

Summary 



WAN Configuration — 


Port Configuration —i 


Protocol Options — (Frame Relay - Annex D) 


IP Routing Options 
IP Filters —, 


— IP RIP Input Filters 

— IP RIP Output Filters 
IPX Routing Options 
IPX Filters —, 


— IPX SAP Input Filters 

— IPX SAP Output Filters 

— IPX RIP Input Filters 

— IPX RIP Output Filters 


Bridging Options — Transmit Filter Table 


Encryption Options (WAN) 


— Transmit Filter 


Global 

1 — Configutration 


IP Global Configuration — 

IPX Global Configuration 
Bridging Global Configuration 
PPP Global Configuration 


IP Static Route Table — IP Static Route 
IP RIP Neighbor List Table 

— Static Address Table — Static Address 


Encryption Global Configuration —i 


Master Key Configuration 
Initial Vector Configuration 


Screen Structure, Configuration 
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For convenience, the Routermate-EX Executive Router separates configuration parameters into 
three areas: 

• Interface Configuration 

• Port Configuration 

• Global Configuration 

This separation reflects the difference between hardware and software considerations, as follows: 
Interface Configuration - applies to the protocol to be used on the physical interface: 

• The LAN interface is permanently configured for Ethernet protocol. 

• The WAN interface can be configured for either PPP (Point-to-Point) or Frame Relay. 
Specific connect service protocol options are configured depending on whether PPP or Frame 
Relay is selected. 

Port Configuration - pertains to the router software, and the configuration of routing, bridging, 
and filtering options. The router can have up to 15 ports (numbered 0 through 14) as follows: 

• Port 0 is permanently mapped to the LAN interface. 

• If the WAN interface is configured for PPP, Port 1 is mapped to the WAN interface, and the 
maximum number of ports is 2 (port 0 and port 1). 

• If the WAN interface is configured for Frame Relay service, from one to fourteen Permanent 
Virtual Circuits (PVCs) are mapped to the WAN interface, and the number of ports equals the 
number of PVCs plus one additional port (Port 0), which is mapped to the LAN interface. 

Global Configuration - involves the configuration of parameters that apply to all configured 
ports; it is not port-specific. 

A brief description of each screen follows. 

Interface Configuration Summary - view the protocol and condition of the LAN and WAN 
interfaces. Access the interface-specific screens below. 

LAN Configuration - enable/disable the LAN interface; view the local MAC address. 

WAN Configuration - enable/disable the WAN interface; access the screens below. 

WAN Protocol Options - configure protocol options for the WAN interface (Frame 
Relay - Annex D only). 

Port Configuration Summary - view configuration parameters for all the virtual ports defined 
on the router; includes port number, name, corresponding interface, protocol, and the type of 
routing or bridging configured; access the port-specific configuration screens below. 

Port Configuration - assign port numbers and corresponding interfaces (WAN only); configure 
IP, IPX, and bridging options; access IP and IPX Filters screens. 

IP Routing Options - configure Internet Protocol options on this port. 

IP Filters - configure IP filtering options on this port; access the screens below. 

IP RIP Input Filter Table - configure networks that are not allowed to be learned on this port 
from the routing update packet. 

IP RIP Output Filter Table - configure networks that are allowed to be advertised on this port 
in the routing update packet. 

IPX Routing Options - configure IPX options on this port. 

IPX Filters - configure IPX filtering options on this port; access the screens below. 
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IPX SAP Input Filter Table - display services that are not allowed to be learned on this port 
from Service Advertising Protocol (SAP) routing update packets. 

IPX SAP Output Filter Table - display services that are allowed to be advertised on this port in 
SAP routing update packets. 

IPX RIP Input Filter Table - display networks that are not allowed to be learned on this port 
from IPX Routing Information Protocol (RIP) routing update packets. 

IPX RIP Output Filter Table - display networks that are allowed to be advertised on this port in 
IPX RIP routing update packets. 

Bridging Options - enable/disable broadcast, multicast, and filtering options for this port. 

Access the screen below. 

Transmit Filters - configure filtering of specific types of Ethernet frames. 

Encryption Options - configure encryption options for the WAN interface. 

Global Configuration - access the global configuration screens below. 

IP Global Configuration - configure global IP parameters. 

IP Static Route Table - view static routes configured on the IP Static Route screen. 

IP Static Route - configure a user-defined route to a router or network in the IP Routing Table. 

IP RIP Neighbor List Table - view and configure addresses of directly-connected routers (any 
adjacent router) from which IP RIP update packets will be accepted. 

IPX Global Configuration - configure global IPX parameters. 

Bridging Global Configuration - configure global bridging parameters. Access the screen 
below. 

Static Address Table - view and delete specific addresses for forwarding or filtering. 

Static Address - add or edit an entry in the Static Address Table. 

PPP Global Configuration - configure global PPP (Point-to-Point Protocol) parameters. 

Encryption Global Configuration - configure the Key Update Time for the Pending Key 
configured on the port-specific Encryption Configuration screen. 
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5.2 Configuration Menu 

Access the Configuration Menu from the Main Menu. This is the top-level menu from which you 
select other screens to configure parameters for the LAN and WAN interfaces. 

To make a selection: 

1. Press the [Space Bar] or [Backspace] to move the cursor to the desired selection. 

2. Press [CR]; the selected menu appears. 


Osicom Technologies 
ROUTERmate-EX Executive Router 

Configuration Menu 

Interface Configuration 
Port Configuration 
Global Configuration 


Cursor Down = [Space Bar] 
Cursor Up = [Backspace] 


Select Menu = [CR] 
Exit = [X] 




Configuration Menu 


Screen Path 

Main Menu 
Configuration 

V 

Configuration Menu 
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5.3 Interface Configuration Summary 

Access the Interface Configuration Summary screen to view the protocol configuration on the 
router's LAN and WAN interfaces. 

To reconfigure an interface, position the cursor on the desired interface and press [CR]; that 
interface's configuration screen is displayed. 


r 
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Interface Configuration Summary 


Interface 

LAN 

WAN 1 


Protocol 
Ethernet 
FR - Annex D 


State 

Enabled 

Enabled 




Cursor Down = [Space Bar] 
Cursor Up = [Backspace] 


Select Menu = [CR] 
Exit = [X] 




Interface Configuration Summary 


Screen Path 

Configuration Menu 
Interface Configuration 

* 

Interface Configuration Summary 
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5.3.1 LAN Configuration 

Access the LAN Configuration screen to enable or disable the Local Area Network (LAN) 
interface and display the interface protocol and MAC Address. The LAN interface is the 
rear-panel interface labeled lOBaseT. 

State - enable/disable the LAN interface. 

Default: Enabled 

Protocol - the LAN interface protocol is permanently configured for Ethernet. 

MAC Address - this read-only field displays the 48-bit hexadecimal Media Access Control 
(MAC) address. The MAC address is permanently assigned to the LAN interface. 


r 
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■\ 


LAN Configuration 


State: 


Enabled 


Protocol: 

MAC Address: 


Ethernet 

FF:FF:FF:FF:FF:FF 


Select = [CR] 
Exit = [X] 





LAN Configuration 


Screen Path 


Configuration Menu 
Interface Configuration 


Interface Configuration Summary 
LAN 


LAN Configuration 
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5.3.2 WAN Configuration 


Access the WAN 1 Configuration screen to configure the state and protocol of the Wide-Area 
Network (WAN) interface. The WAN interface is the rear-panel interface labeled WAN 1. 

To configure protocol options, position the cursor on Protocol Options and press [CR]; the 
protocol options screen for the selected protocol is displayed. 

NOTE 

Protocol Options is only displayed when WAN 1 is configured for Frame Relay - Annex D. 


r 
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WAN 1 Configuration 


State: 

Protocol: 

Data Rate: 
Maintenance Clock: 


Enabled 
PPP (sync) 

1536K (64K x 24) 
Off 


Protocol Options: >> 


Cursor Down = [Space Bar] 
Cursor Up = [Backspace] 


Select = [CR] 
Exit = [X] 





WAN Configuration 


Screen Path 


Configuration Menu 
Interface Configuration 


Interface Configuration Summary 
WAN 1 


WAN 1 Configuration 


State - enable/disable the WAN 1 interface. 


Default: Enabled 
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Protocol - configure the protocol for the WAN 1 interface. Select: 

PPP (sync) 

Frame Relay - Annex D 
Frame Relay - No LMI 

The router supports IP Routing, IPX Routing and Transparent Bridging over PPP or Frame 
Relay. 

The PPP LCP RFC1661, IPCP RFC1332 , IPXCP RFC1552, and BCP RFC1638 are supported. 

The router treats Frame Relay as a series of point-to- point connections. In Numbered mode, 
each port must be assigned a unique network or sub network number. RFC 1490 and Cisco frame 
relay encapsulations are supported for IP Routing, IPX Routing, and Transparent Bridging. 
Osicom's 4802 Bridging Frame Relay encapsulation is also supported. 

Inverse ARP is supported to provide compatibility with other vendor’s routers that require 
Inverse ARP. 


CRC recalculated mode is used for bridging over PPP and Frame Relay (RFC 1490 and Cisco 
Encapsulation). CRC pass-through is not supported. 

PPP (sync) - Point-to-Point Protocol, in accordance with RFC 1548, provides a standard 
method for transporting multi-protocol datagrams over point-to-point links. 

Frame Relay - Annex D - uses the protocol defined by the American National Standards 
Institute (ANSI) publication T1.617, Annex D. Select this option when the WAN interface 
is connected to a frame relay service. 

Frame Relay - No LMI - a Frame Relay protocol without Local Management Interface 
(LMI). Select this option for back-to-back testing. 

Default: PPP 

Data Rate - set this to match the speed of the attached CSU. It is required to calculate the 
Utilization statistics. Select: 


64K (64K x 01) 
128K (64K x 02) 
192K (64K x 03) 
256K (64K x 04) 
320K (64K x 05) 
384K (64K x 06) 
448K (64K x 07) 
512K (64K x 08) 
576K (64K x 09) 
640K (64K x 10) 
704K (64Kx 11) 
768K (64Kx 12) 
832K (64Kx 13) 
896K (64K x 14) 
960K (64Kx 15) 


1024K (64K x 16) 
1088K (64Kx 17) 
1152K (64Kx 18) 
1216K (64Kx 19) 
1280K (64K x 20) 
1344K (64K x 21) 
1408K (64K x 22) 
1472K (64K x 23) 
1536K (64K x 24) 
1600K (64K x 25) 
1664K (64K x 26) 
1728K (64K x 27) 
1792K (64K x 28) 
1856K (64K x 29) 
1920K (64K x 30) 


Default: 1536K (64Kx 24) 


Maintenance Clock - factory test purposes only. Default is Off 
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5.3.2.1 WAN Protocol Options (Frame Relay) 

Access the WAN 1 Protocol Options screen to configure protocol options for the WAN interface. 
WAN protocol options only apply if the protocol is set for Frame Relay - Annex D. 


The counters configured at this screen relate to frame relay polling and polling responses over the 
WAN link. Normally, these parameters can be left at their recommended default settings. The 
settings can be increased by a knowledgeable user who wishes to decrease WAN link overhead. 


r 
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WAN 1 Protocol Options 


Full Enquiry Interval: 6 

Error Threshold: 3 

Monitor Events: 4 

Polling Interval: 10 s 

Polling Verification Timer Interval: 15 s 


Cursor Down = [Space Bar] 
Cursor Up = [Backspace] 


Edit Field = [CR] 
Exit = [X] 


k 


WAN Protocol Options (Frame Relay) 


Screen Path 

Configuration Menu 
Interface Configuration 

* 

Interface Configuration Summary 
WAN 1 

* 

WAN 1 Configuration 
Protocol Options 

* 

WAN 1 Protocol Options 


Full Enquiry Interval - the frequency at which the unit requests full status information relative 
to the number of regular status requests. With the default setting of 6, for example, 1 of every 6 
status requests is a request for full status. 

Valid range: 1 - 255 

Default: 6 
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Error Threshold - number of either Local In-channel Signaling Link Reliability Errors or Local 
In-channel Signaling Protocol Errors that can occur during a sliding monitored events count 
defined by Monitor Events (see following parameter) before a channel or frame relay user device 
is declared inactive. 

The value of this parameter must be less than the value for Monitored Events; entering a higher 
value is not permitted. 

Valid range: 1-10 

Default: 3 

Monitor Events - count of monitored events (in number of messages). From the router's 
perspective, a monitored event is the transmission of a poll for status (see Polling Interval, 
following). 

Monitor Events specifies the size of the sliding window used by the router to determine whether a 
channel or user device is active. After a channel or user device is declared inactive, the router 
waits the specified number of successful poll cycles before declaring the channel/user device 
active again. The user device can also wait the specified number of successful poll cycles to 
detect service restoration. 

The value of this parameter must be greater than the value of the Error Threshold parameter; 
entering a lower value is not permitted. 

Validrange: 2- 11 

Default: 4 

Polling Interval - the frequency at which the network is polled for status. This setting must be 
smaller than the setting for Polling Verification Timer Interval; entering a higher value is not 
permitted. 

Valid range: 5-30 seconds 
Default: 10 s 

Polling Verification Timer Interval - the timer for verifying the polling cycle. This setting must 
be greater than the setting for Polling Interval; entering a lower value is not permitted. 

Valid range: 6-31 seconds 

Default: 15 s 
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5.4 Port Configuration Summary 

Access the Port Configuration Summary screen to view information about all the ports configured 
on the router. The maximum number of ports is 15, (1 for LAN and 14 for WAN 1). 

To configure a specific port: 

1. Position the cursor on the desired port number and press [CR]. 

2. The Port Configuration screen for the selected port is displayed. 

The contents of the Port Configuration screen for an individual port depends on the protocol 
selected. 
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Port Configuration Summary 


Port 

Port Name 


Interface 

Protocol 

Route/Bridge 

0 

Local : 

Site 


LAN 


Ethernet 

IP 

IPX 

BR 

1 

Remote 

Site 

1 

WAN 

1 

FR—1000 

BR 



2 

Remote 

Site 

2 

WAN 

1 

FR—1001 

IP 

IPX 


3 

Remote 

Site 

3 

WAN 

1 

FR-1002 

IP 



4 

Remote 

Site 

4 

WAN 

1 

FR-1003 

IP 



5 

Remote 

Site 

5 

WAN 

1 

FR-1004 

IP 



6 

Remote 

Site 

6 

WAN 

1 

FR-1005 

IP 



7 

Remote 

Site 

7 

WAN 

1 

FR-1006 

IP 



8 

Remote 

Site 

8 

WAN 

1 

FR-1007 

IP 



9 

Remote 

Site 

9 

WAN 

1 

FR-1008 

IP 



10 

Remote 

Site 

11 

WAN 

1 

FR-1009 

IP 



11 

Remote 

Site 

11 

WAN 

1 

FR—1010 

IP 



12 

Remote 

Site 

12 

WAN 

1 

FR—1011 

IP 



13 

Remote 

Site 

13 

WAN 

1 

FR—1012 

IP 



14 

Remote 

Site 

14 

WAN 

1 

FR—1013 

IP 



or Down 

= [Space Bar] 




Select 

Menu 


Cursor Up = [Backspace] 


V 


Exit = [X] 


Port Configuration Summary 


Screen Path 

Configuration Menu 
Port Configuration 

+ 

Port Configuration Summary 


Port - displays the port number. 

• Port 0 is always the LAN interface (the rear-panel interface labeled lOBaseT). 

• If the WAN 1 interface is configured for PPP, Port 1 is mapped to the WAN 1 interface. 

• If the WAN 1 interface is configured for Frame Relay, from 1 to 14 Permanent Virtual Circuits 
(PVCs) can be mapped to the WAN 1 interface. 

Port Name - free-text port identifier configured at the Port Configuration screen (see following 
section). 

Interface - interface (LAN or WAN) to which each port is mapped at the Port Configuration 
screen. 
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Protocol - the protocol used for the port (Ethernet, PPP, or FR). The protocol for the LAN 
interface (Port 0) is always Ethernet. The protocol for the WAN interface (ports 1 through 14) is 
configured at the WAN Interface screen. 

If the protocol is either Frame Relay - Annex D or Frame Relay - No LMF the unit displays FR 
followed by the DLCI (Data Link Connection Identifier) for this port. The DLCI is configured at 
the Port Configuration screen. The default DLCI is 25. 

Route/Bridge - the method of routing or bridging that has been enabled at the Port Configuration 
screen for this port: 

IP - IP routing 

IPX - IPX Routing 

BR - Bridging 
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5.4.1 Port Configuration 

Use the Port Configuration screen to identify the port and to enable or disable the following: 

• IP routing 

• IPX routing 

• Filtering 

• Bridging 

• Encryption (WAN only) 

Configuration options for ports mapped to the LAN and WAN interfaces are identical except for 
the parameters noted. See Port 0 Configuration . When Frame Relay is selected for the WAN 
interface, the additional options noted in the Port 1 Configuration screen are displayed. 


To access any of the options screens, position the cursor on the desired selection and press [CR]. 


r 
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Port 0 Configuration 




Port Name: 

Port 1 

Interface: 

LAN 

IP Routing: 

Enabled 

IP Routing Options: 

>> 

IP Filters: 

>> 

IPX Routing: 

Disabled 

IPX Routing Options: 

>> 

IPX Filters 

>> 

Bridging: 

Disabled 

Bridging Options: 

>> 


Cursor Down = [Space Bar] Edit Field = [CR] 

Cursor Up = [Backspace] Exit = [X] 




Port 0 Configuration (LAN) 


Screen Path 

Configuration Menu 
Port Configuration 

* 

Port Configuration Summary 
Port 0 

* 

Port 0 Configuration 
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Port Name - a text name for this port. 

Valid input: Maximum 24 alphanumeric characters. 

Interface - the interface to which this port is mapped. 

Valid input: LAN , WAN 1 or None. Selecting None blanks out all columns on the Port 
Configuration Summary screen. 

Default: Port 0 = LAN 

Port 1 = WAN 1 

Ports 2-14 = None 

IP Routing - enable/disable IP routing on this port. 

Default: Enabled 

IPX Routing - enable/disable IPX routing on this port. 

Default: Disabled 

Bridging - enable/disable bridging on this port. 

Enabled - incoming frames that are not routed are bridged. 

Disabled - incoming frames that are not routed are discarded. 

Default: Disabled 

Port State (Frame Relay only) - enable/disable this port. 

Default: Enabled 

DLCI (Frame Relay only) - set the Data Link Connection Identifier for this port (provided by 
carrier). 

Valid range: 0- 1023 
Default: 25 

Encapsulation - This option is only displayed if the WAN protocol is set to Frame Relay (No 
LMI or Annex D). 

RFC1490 - the router will receive IP routed, IPX routed, and bridged frames over frame 
relay in both RFC 1490 and Cisco encapsulation. The router automatically changes the 
transmit encapsulation depending on the encapsulation received. Upon power up or link up, 
the router will default to transmitting in RFC 1490 encapsulation. Upon receipt of a Cisco 
encapsulated frame, the router will automatically switch to transmitting in the Cisco 
encapsulation. 

RFC4802 - the bridged traffic will be encapsulated in the 4802 format allowing 
interoperability with older 4802s that do not support RFC 1490 encapsulation. 

Default: RFC1490 
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Encryption - enable/disable encryption on this port. 


NOTE 

Encryption and Encryption Options are only displayed when the optional encryption daughter 
card is installed. 


For units that include optional encryption hardware, the Encryption Options screen cannot be 
accessed and encryption options cannot be configured unless the Key Password is entered at the 
Password screen. This applies to terminal or Telnet access. 


Default: Disabled 

r - 
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Port 1 Configuration 
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Port Name: 

Port 1 

Interface: 

WAN 1 

IP Routing: 

Enabled 

IP Routing Options: 

>> 

IP Filters: 

>> 

IPX Routing: 

Disabled 

IPX Routing Options: 

>> 

IPX Filters 

>> 

Bridging: 

Disabled 

Bridging Options: 

>> 

Port State: 

Enabled 

DLCI: 

25 

Encapsulation: 

RFC1490 

Encryption: 

Disabled 

Encryption Options: 

>> 


Cursor Down = [Space Bar] 

Cursor Up = [Backspace] 

— 

Port 1 Configuration (WAN; Frame Relay) 


Edit Field = [CR] 
Exit = [X] 



Screen Path 

Configuration Menu 
Port Configuration 

ir 

Port Configuration Summary 
Port 1 

+ 

Port 1 Configuration 
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5.4.1.1 IP Routing Options (LAN) 

Access the Port IP Routing Options screen to configure IP routing options for port 0 (LAN). 
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Port 0 IP Routing 

Address: 

Subnet Mask: 

RIP: 

Metric: 

Frame Type: 


Options 

192.0.2.1 
255.255.255.0 
RIP vl Compatible 
1 

TYPE II 




Cursor Down = [Space Bar] 
Cursor Up = [Backspace] 


Edit Field = [CR] 
Exit = [X] 




Port 0 IP Routing Options (LAN) 


Screen Path 

Configuration Menu 
Port Configuration 

+ 

Port Configuration Summary 
Port# 

* 

Port # Configuration 
IP Routing Options 

* 

Port # IP Routing Options 

Address - the Internet Protocol (IP) address for this port expressed in dotted decimal notation. 
All zeros indicate no address defined. 

The Address for each port must have an unique network number. The host portion of the 
Address can not be set to all zeros. The first and the last network address of each address class 
are reserved. The valid and invalid address are listed below. The user is not allowed to save 
changes with a duplicate, all zeros, or invalid address. The "Invalid Address" message is 
displayed if Yes is entered at the save configuration prompt. 


NOTES 

The default LAN address will allow a defaulted router to be accessed via its LAN or WAN 
ports. When defaulted, access via the WAN will require the remote router to be configured for 

Unnumbered links. 

The default LAN address is only intended to allow initial Telnet access to the router so that it 
can be configured without attaching a terminal to the console port. The default address is not 
intended to be used during normal operation 
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o.o.o.o 

reserved 

1.0.0.0- 126.0.0.0 

available 

127.0.0.0 

reserved 

128.0.0.0 

reserved 

128.1.0.0- 191.254.0.0 

available 

191.255.0.0 

reserved 

192.0.0.0 

reserved 

192.0.1.0- 223.255.254.0 

available 

223.255.255.0 

reserved 

224.0.0.0 - 239.255.255.255 

reserved 

240.0.0.0 - 255.255.255.254 

reserved 

255.255.255.255 

reserved 


Default: LAN = 192.0.2.1 

WAN = 192.0.3.1 (Numbered mode) 

Subnet Mask - if IP subnetworking is used, identifies the parts of the IP address that are used for 
the network, subnetwork, and host numbers. 

A mask that is smaller than the default mask value is not permitted but a mask that is larger than 
default is permitted. The default subnet masks are identified below. 

Network Class Subnet Mask 

A 255.0.0.0 

B 255.255.0.0 

C 255.255.255.0 

Default: 255.255.255.0 

Setting the subnet portion of the address to all ones is always allowed, but setting the subnet 
portion of the address to all zeros is only allowed if the global Subnet Zero option is Enabled. 
Setting the subnet portion of the address to all ones or all zeros is discouraged. 

A subnet of all ones broadcast address is the same as the network broadcast address. For 
example, the broadcast address for network 130.110.0.0 is 130.110.255.255, which is the same 
the as the broadcast address for subnet 130.110.255.0. 

A route for a subnet of all zeros has the same address as a network route. For example, if 
network 130.110.0.0 is subnetted as 255.255.255.0, the subnet zero route would be 130.110.0.0, 
which is the same as the network route. 
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RIP - set Routing Information Protocol as described below. The key feature of RIP version 2 is 
inclusion of the subnet mask with the routing updates. This allows use of variable length subnet 
mask (VLSM). 

Different ports on the router can use different RIP versions. In this case, the router will perform a 
conversion between the RIP versions. RIP version 2 should be used throughout a subnetted 
network if VLSM is used since RIP version 1 cannot interpret VLSM routes correctly. 

Osicom's implementation of RIP version 2 does not support authentication. 

For both RIP vl and RIP v2, subnet routes are only advertised on ports that are on the same 
subnetted network. Subnet routes are hidden or summarized when advertised on a port that is on 
a different network. Host routes are not supported; any host routes received are discarded. 

RIP vl Only - RIP messages are advertised in the vl format; only vl format messages are 
learned. Broadcast and multicast v2 format messages are not learned. 

RIP vl Compatible - the RFC1058 complaint version of RIP. RIP messages are advertised 
in the vl format; vl format messages and v2 format messages that are broadcast are 
learned. V2 format messages that are multicast are not learned. 

RIP v2 Compatible - RIP messages are advertised via broadcast messages in the v2 format. 
RIP vl format messages, v2 format messages that are broadcast, and v2 format messages 
that are multicast are learned. 

RIP v2 Only - RIP messages are advertised via multicast messages in the v2 format, and v2 
format messages that are multicast are learned. Vl format messages and v2 format 
messages that are broadcast are not learned. 

Disabled - RIP messages are not advertised or learned on this port. 

Default: RIP vl Compatible 

Metric - sets the weight (number of hops) associated with this port. This determines the number 
of hops to enter in the IP Routing Table for the direct entry associated with this port. The metric 
value is added to the value received in the RIP message and the sum is placed in the IP routing 
packet for each route learned on this port. 

Valid input: 1 to 30 

Default: 1 

Frame Type (LAN only) - the MAC layer frame encapsulation to be used for IP transmissions 
out the specified port. SNAP is used very seldom since the native frame type for IP is Type II. 

Valid input: Type II or SNAP (see table below) 

Default: Type 11 


Frame Type 

MTU 

TYPE II 

1500 

SNAP 

1492 
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5.4.1.2 IP Routing Options (WAN) 

Access the Port IP Routing Options screen to configure IP routing options for the WAN 
interface. 


See Port IP Routing Options for the LAN in the previous section for parameters not defined here. 
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Mode - set the operating mode for this port. 

Numbered - an IP address must be assigned to this port. 

Unnumbered - no IP network or subnetwork numbers are assigned to the WAN interface. 
Besides conserving IP address space, Unnumbered mode also decreases the size of the 
routing table since no direct routes are created for the WAN ports. This reduces the 
amount of memory required to hold the routing table and also decreases the amount of 
bandwidth used to send routing updates. 

When the mode is changed from Unnumbered to Numbered, the Address and Subnet mask values 
are displayed. The default value for Port 1 is 192.0.3.1 (255.255.255.0). The default value for 
Port 2 and greater is 0.0.0.0 255.255.255.0. A direct route for Port 2 and greater is not created 
until a valid address and subnet mask is entered. 
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Address and Subnet Mask - Address and Subnet Mask values are displayed only if the mode is 
Numbered. When the mode is Unnumbered, the Address and Subnet mask values are blanked out. 
A direct route for Port 2 and greater is not created until a valid address and subnet mask are 
entered. Valid values for the address and subnet mask are the same as those defined for port 0. 

Defaults'. 

Port 1: Address - 192.0.3.1 

Subnet Mask - 255.255.255.0 
Port 2 and greater: Address - 0.0.0.0 
Subnet mask - 255.255.255.0 

Remote Address - determines which subnets should be advertised and learned on this port. Enter 
the address of the remote router’s LAN port (the remote router ID). The Remote Address value 
is only displayed if the mode is Unnumbered. When the mode is Numbered, the Address value is 
blanked out. This option only needs to be configured if subnet routes need to be advertised across 
an unnumbered link. When left at the default value, all subnet routes will be summarized - only 
the parent network address of IP subnets are advertised. 

Default: 0.0.0.0 

Remote Subnet Mask - use this option in conjunction with the Remote Address option to 
determine which subnets should be advertised and learned on this port. Enter the subnet mask of 
the remote router’s LAN port. The Remote Subnet Mask value is only displayed if the mode is 
Unnumbered and RIP is set to RIP vl Only, RIP vl Compatible, or RIPv2 Compatible. When 
the mode is Numbered or the mode is Unnumbered and RIP is RIP v2 Only, then the Remote 
Subnet Mask value is blanked out. 

Default: 255.255.255.0 

MTU (Maximum Transmission Units) (WAN only) - the maximum permitted size, in bytes, of 
IP frames to be transmitted out the WAN interface. The MTU includes the size of the IP header 
and IP data fields. 

Valid input: 296, 576, 1492, 1500 

Default: 1500 

Inverse ARP (WAN only) - applies only if the Protocol is set to Frame Relay (see WAN 
Configuration screen) and the Mode is Numbered. When the Mode is Unnumbered, the Inverse 
ARP choice is blanked out. This option is provided to interoperate with other vendors that treat 
Frame Relay as a non-broadcast multi-access (NBMA) interface. 

Routers that treat an interface configured for Frame Relay as an NBMA interface can use Inverse 
ARP to learn the IP address of the remote router associated with a DLCI. These routers usually 
have the ability to use static mapping instead of Inverse ARP. Enable this option if the remote 
router requires Inverse ARP. NBMA with Inverse ARP is the default on Cisco routers. 

Inverse ARP is not needed by the Routermate Router since it treats Frame Relay as a series of 
point-to-point connections. 

Enabled - the router will send and respond to Inverse ARP requests as defined in RFC 
1293. 

Disabled - the unit ignores Inverse ARP requests and does not send Inverse ARP requests. 
Default: Disabled 
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5.4.1.3 IP Filters 


The screen below illustrates the Port IP Filters screen . In an IP environment, the IP Routing 
Information Protocol (RIP) exchanges routing information with other routers. IP filters can be 
used to reduce the amount of IP routing traffic on the WAN link, and to restrict access between 
certain networks. If IP Filters are enabled for a port, use this screen to enable or disable specific 
types of filters for that port. 

The screen is the same for LAN and WAN ports. 

To access the Filter Tables listed on the screen, position the cursor on the desired selection and 
press [CR]. 
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Announce Static Routes - enable/disable port's ability to advertise user-defined IP routes out the 
specified port. 

Enabled - port advertises IP static routes. 

Disabled - port does not advertise IP static routes. 

Default: Enabled 
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Announce Default Route - enable/disable port's ability to advertise the default route out the 
specified port. 

Enabled - port advertises the default route. 

Disabled - port does not advertise the default route. 

Default: Enabled 

Learn Default Route - enable/disable port's ability to learn the default route on the specified 
port. 

Enabled - port learns the default route. 

Disabled - prevents the default route from being learned on this port. 

Learned Default Route Minimum Value - allows the user to set a minimum default route 
metric. When a default route is learned, the metric placed in the routing table will be the larger of 
the learned metric and the Learned Default Route Minimum Value. 

Valid range: 1-14. 

Default: 1 

RIP Listen Only - determines port's handling of RIP messages. 

Enabled - port learns routes, but routes are not advertised on this port. 

Disabled - routes are learned and advertised on this port. 

Default: Disabled 

RIP Input Filter - filters received RIP messages. 

Negative - RIP entries that match a filter are discarded; all others are passed. 

Disabled - RIP entries are not filtered. 

Default: Disabled 

RIP Output Filter - filters transmitted RIP messages. 

Positive - RIP entries that match a filter are passed; all others are discarded. 

Disabled - RIP entries are not filtered. 

Default: Disabled 

BootP Relay - the router listens for BootP request on UDP port number 67 on ports with the 
BootP Relay option enabled. Any BootP request received from the client will be forwarded out 
all ports with the BootP Relay option enabled except for the port the BootP request was received 
on. For a client to access a remote BootP server, the BootP Relay option must be enabled on all 
of the ports in the path between the client and the server including the ports that the client and 
server are attached to. See RFC951 and RFC1542 for more details. 

Enabled - BootP Relay process allowed. 

Disabled - BootP Relay process prevented. 
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5.4.1.3.1 IP RIP Input/Output Filters 


The Port IP RIP Input and Output Filter Table screens are identical (except for the screen name). 
IP addresses configured for each table are handled differently, as described below: 

The Input Filter Table is also called the Reject List. If RIP input filters are enabled, use this 
screen to specify the IP address of networks that are not allowed to be learned on this port from 
the routing update packet. 

The Output Filter Table is also called the Advertise List. If RIP output filters are enabled, use this 
screen to specify the IP address of networks that are allowed to be advertised over this port. 

Only the addresses listed in the table are advertised over this port. 

Address range: 0.0.0.0 to 255.255.255.255 

Default: Blank 

To add or edit an entry: 

1. Position the cursor on the desired entry number and press [CR]. 

2. Edit/configure the address. Press [CR] again to de-select. 
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5.4.1.4 IPX Routing Options 

Access the Port IPX Routing Options screen to configure IPX routing options for the LAN and 
WAN interfaces. IPX routing options for ports mapped to the LAN and WAN interfaces are 
identical except for the parameters noted. 

IPX Network Number - the IPX network number for the this port. Each port must have a 
unique network number. When the Mode is changed from Unnumbered to Numbered the default 
value of all zeros is displayed. The user is not allowed to save changes with a duplicate or all 
zeros number displayed. An “Invalid Network Number” message is displayed if Yes is entered at 
the save configuration prompt. 

Valid input: 32-bit hex range 00000001 to FFFFFFFE. All zeros indicate no address 
defined. 

Default: 00000000 

Frame Type (LAN only) - the frame type to be used for IPX transmissions out the LAN 
interface. Select the option to match the frame type that is used by the Novell servers and clients 
on the LAN you are connected to. Novell servers and clients support four different types of 
ethernet encapsulation (frame type). The default value that a server and client use is different for 
various software revisions. Selecting the wrong frame type is a common IPX configuration error 
and will prevent the Routermate Plus from communicating with Novell servers and clients. The 
Routermate Plus will only route the frame type selected. All other frame types will be bridged (if 
bridging is enabled). 

Valid input: Type II, 802.3 (RAW), 802.2 (LLC), or SNAP 
Default: 802.2 

Mode (WAN only) - set the operating mode for this port. 

Numbered - an IPX network number is assigned to this port. 

Unnumbered - an IPX Network Number is not assigned to this port; the IPX Network 
Number option is blanked out. 

Unnumbered mode decreases the size of the routing table since no direct routes are created 
for the WAN ports. This reduces the amount of memory required to hold the routing table 
and also decreases the amount of bandwidth used to send routing updates. 

IPXWAN (WAN only) - a protocol developed by Novell and specified in RFC 1634. The 
purpose of IPXWAN is to provide a common way of exchanging router to router information 
across different type of wide area links. RFC 1634 describes how Novell IPX operates over 
various WAN media using the IPXWAN protocol. 

Support for IPXWAN is only provided to allow the router to be compatible with Novell routers. 
It is not required to route IPX and should be disabled unless it is required. 

NOTE 

IPXWAN must be set to the same value on both ends of a connection. If it is not set to the 
same value, then the router will not be able to communicate across the link. 

Default: Disabled 
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Transport Time - sets the weight (in time ticks) associated with this port. This determines the 
delay entered in the IPX Routing Table for the direct route associated with this port. The 
Transport Time value is added to the value shown in the IPX Routing Table for each route 
advertised on this port. Set the Transport Time to the estimated amount of time to send a 
576-byte packet on this port. For interfaces with more than 1Mbps of bandwidth, set the 
Transport Time to 1 tick. 

There are 18.21 time ticks in a second, so a time tick equals approximately 1/18 second or 55 ms. 
Valid input: 1 to 255 ticks 
Default: 1 tick 

Periodic RIP Timer - the time interval between periodic IPX RIP broadcasts transmitted out the 
specified virtual IPX port. 

• Valid input: 30 to 999 seconds 

• Default: 60 s 

RIP Age Timer - the maximum time between RIP update messages before a route that was 
learned (i.e., that was added to the IPX Routing Table as the result of an IPX RIP update 
message) is removed from the IPX Routing Table. If an update message is received for an 
address, the internal aging count reverts to zero. If no update message is received by the time 
configured for the RIP Age Timer, the route is removed from the IPX Routing Table. 

Valid input: 30 to 9999 seconds 

Default: 180 s 

Periodic SAP Timer - the time interval between periodic IPX SAP broadcasts transmitted out 
the specified virtual IPX port. 

Valid input: 30 to 999 seconds 

Default: 60 s 

SAP Age Timer - the maximum time between SAP update messages before the server that was 
learned (i.e., that was added to the IPX Services Table as the result of an IPX SAP update 
message) is removed from the IPX Services Table. If an update message is received for a service, 
the aging count for that server reverts to zero. If no update message is received by the time 
configured for this timer, the server is removed from the IPX Services Table. 

Valid input: 30 to 9999 seconds 

Default: 180 s 
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Inverse ARP (WAN only) - applies only if the Protocol is set to Frame Relay (see WAN 
Configuration screen) and the Mode is Numbered. When the Mode is Unnumbered, the Inverse 
ARP choice is blanked out. This option is provided to interoperate with other vendors that treat 
Frame Relay as a non-broadcast multi-access (NBMA) interface. 

Routers that treat an interface configured for Frame Relay as an NBMA interface can use Inverse 
ARP to learn the IPX address of the remote router associated with a DLCI. These routers usually 
have the ability to use static mapping instead of Inverse ARP. Enable this option if the remote 
router requires Inverse ARP. NBMA with Inverse ARP is the default on Cisco routers. 

Inverse ARP is not needed by the Routermate Router since it treats Frame Relay as a series of 
point-to-point connections. 

Enabled - the router will send and respond to Inverse ARP requests as defined in RFC 
1293. 

Disabled - the unit ignores Inverse ARP requests and does not send Inverse ARP requests. 
Default: Disabled 
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5.4.1.5 IPX Filters 


Access the Port IPX Filters screen to configure IPX filters, and to access configuration screens 
for enabled filters. Use IPX filters to reduce the amount of IPX routing traffic on the LAN or 
WAN link, and to restrict access between certain networks. 

To display the filter tables listed in the screen, move the cursor to the desired selection and press 
[CR], 

Diagnostic Packets (LAN only) - a filter for diagnostic packets on the specified virtual IPX port. 


Forward - the port will pass the diagnostic packet. 

Filter - packets with a destination socket number of 456 are filtered at the receiving port. 
Default: Forward 

Serialization Packets (LAN only) - a filter for Novell serialization security packets on the 
specified virtual IPX port. Novell Netware File Servers broadcast security packets that contain 
serialization information regarding the license of the file server executable. Serialization packets 
consume valuable bandwidth over a low-speed serial WAN link. Disabling the broadcast of 
serialization packets reduces WAN traffic. Disabling serialization packets is not intended to 
interfere with copyright protection mechanisms. 

Forward - the port will pass serialization packets. 

Filter - packets with a destination socket number of 457 are filtered at the receiving port. 
Default: Forward 

Type 20 Packets - these packets are used to propagate broadcast messages using different 
protocol through the IPX network. The most common use is NetBIOS encapsulated in IPX. 

Broadcast - Type 20 packets received on this port will be broadcast out all other ports 
with IPX Routing enabled and the Type 20 Packets option set to Broadcast. 

Filter - disables the processing of Type 20 packets. 

Default: Filter 

Watchdog Packets (WAN only) - the method of Novell File Server "Keep-Alive" Watchdog 
Spoofing. When a Netware workstation logs into a Novell server, the server issues periodic 
Keep-Alive messages to the client in order to determine if the workstation is active. The 
Keep-Alives can consume considerable bandwidth on low-speed serial links. Watchdog packets 
received on the LAN that are to be forwarded across a WAN port with watchdog spoofing 
enabled are spoofed. 

Spoofed - this option is enabled. 

Forward - watchdog packets are not spoofed. 

Default: Forward 

SAP and RIP Input Filters - applied to RIP and SAP update messages received by a port. The 
filters control what is entered in the IPX SAP and RIP tables. 
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SAP and RIP Output Filters - applied to RIP and SAP update messages transmitted by a port. 
The filters control what is advertised on the specified port. 

Positive Filter - SAP/RIP entries that match a filter entry are passed; all others are 
discarded. 

Negative Filter - SAP/RIP entries that match a filter entry are discarded; all others are 
passed. 

Disabled - the filter table is not used. 

Default: Disabled 
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5.4.1.5.1 IPX SAP Input/Output Filters 

Both the Port IPX SAP Input Filter Table and the Port IPX SAP Output Filter Table are shown 
below. The two tables are identical in appearance. Input filters are applied to SAP or RIP entries 
received by a port; they control what is entered in the local routers SAP or RIP tables. Output 
filters are applied to SAP or RIP entries transmitted by a port; they control what is advertised by 
the local router. 

The IPX Service Advertising Protocol (SAP) lets IPX advertise Novell IPX services offered by 
such devices as file servers (file transfer), printer servers (print service), and gateways (protocol 
conversion). SAP filters can be used to filter SAP update packets. 

To access the tables, select either SAP Input Filter Table or SAP Output Filter Table at the Port 
IPX Filters screen. 

The maximum number of entries for each table is 28. If more than 14 entries are configured, 
press [+] or [-] to toggle between pages 1 and 2. 

To add or edit an entry: 

1. Position the cursor on the desired entry number and press [CR]; the IPX SAP Input (or 
Output) Filter screen is displayed. 

2. At the Filter screen, move the cursor to the desired field and press [CR] to select the field. 

3. Configure each parameter as required. 

4. Press [X] to return to the Filter Table. 

To delete an entry, position the cursor on it and press [D]. 

All filter options are taken into account when filtering. The user can configure any combination 
of the filter options or all of the options. 

Setting the Network Address, Filter Mask, Node Address, Server Type, and Server Name to their 
default value indicates no table entry. Setting any one of these options to a non-default value 
causes an entry in the filter table. 

Saving an entry with all default values does not cause an entry to be placed in the table. 

Don't care fields can be configured in an entry, as follows: 

• Saving an entry with a network address of all zeroes and a filter mask of FFFFFFFF causes 
these fields to be blank in the SAP Filter Table, and indicates that the network address is not 
tested by a filter. 

• Saving an entry with all zeroes for the service type or node address causes these fields to be 
blank in the SAP Filter Table, and these fields are not tested by a filter. 

• If the server name is blank, the server name is not tested by a filter. 

Filter State - enable/disable the filter. 

Default: Enabled 

Network Address - IPX network number for the router's interface (must match the network 
number of the Novell device's interface to which it is attached). 

Valid input: 32-bit hex range 00000000 to FFFFFFFE. 

Default: 00000000', indicates no network address configured. 
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Filter Mask - used in a logical 'AND' with the network address to determine which part of the 
network address should be considered. For example, configuring a network address of 
ABCD0000 and a filter mask of FFFF0000 causes the filter to be applied to addresses 
ABCD0000 through ABCDFFFF. Configuring a network address of 00000000 and a filter mask 
of FFFF0000 causes the filter to be applied to addresses 00000001 through 0000FFFF. 

Valid input: 32-bit hex range 00000001 to FFFFFFFF 

Default: FFFFFFFF 

Node Address - the end-station node address assigned to the router. The node address is 
assigned the same value as the MAC address. This address must match one of the addresses 
assigned to the router interfaces. When a node address is specified, the filter is applied against the 
specified network address, or against all networks if the network address is set to all zeros. 

Valid input: 48-bit hex range 000000000000 to FFFFFFFFFFFF 

Default: 000000000000', no node address configured. 
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Server Type - the type of service provided by the server. 
See the table of commonly-used service types . 

Valid input: 16-bit hex range 0000 to FFFF 
Default: 0000\ no server type configured 
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Server Name - the text name for the server that is distributed to other IPX services via SAP 
messages. 

Valid input: Up to 48 alphanumeric characters. A shortened form of the server name is 
displayed on the SAP Filter Table. 

Default: Blank 


Selected IPX Services 

SERVICE 

SERVER TYPE 

User 

1 

User Group 

2 

Print Queue 

3 

File Server 

4 

Job Server 

5 

Gateway 

6 

Print Server 

7 

Archive Queue 

8 

Archive Server 

9 

Job Queue 

A 

Administration 

B 

Remote Bridge Server 2 

24 

Bridge Server 

26 

TCP/IP Gateway 

27 

Archive Server SAP 

2e 

Advertising Print Server 

47 

Print Queue User 

53 

HP Laserjet 

30c 

Wildcard 

FFFF 
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5.4.1.5.2 IPX RIP Input/Output Filters 

The screen below illustrates the filter table for both IPX RIP input and output filters . The screens 
for input and output filters are the same except for the screen name. 

The configuration and operation of the IPX RIP Filters is similar to the IPX SAP Filters described 
in the previous section except the fields that can be filtered are different. 

Routers in an IPX environment use the IPX Routing Information Protocol (RIP) to exchange 
routing information. IPX RIP is different from IP RIP, although the purposes of both are similar. 

To access the tables, select RIP Input Filter Table or RIP Output Filter Table at the Port IPX 
Filters screen. 

The maximum number of entries for each table is 30. If more than 15 entries are configured, 
press [+] or [-] to toggle between pages 1 and 2. 

To add or edit an entry: 

1. Position the cursor on the desired entry number and press [CR]; the IPX RIP Input (or Output) 
Filter screen is displayed. 

2. At the Filter screen, move the cursor to the desired field and press [CR] to select the field. 

3. Configure each parameter as required. 

4. Press [X] to return to the Filter Table. 

To delete an entry, position the cursor on it and press [D]. 

Saving an entry with all default values does not cause an entry to be placed in the table. 
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Port 1 IPX RIP Input (Output) Filter Table 


Page 1 


Filter State 
1. Enabled 
2 . Enabled 
3. Disabled 
4 . Enabled 

5. Enabled 

6 . 

7 . 


Network Address 
E0100000 
00000000 
10100000 
E0100000 
20100000 


Filter Mask 

FFFFFFFF 

FFFFFFFF 

FFFFFFFF 

FFFFFFFF 

FFFFFFFF 


Cursor Down = [Space Bar] 
Cursor Up = [Backspace] 


Delete = [D] 
Page = [ + ] [- 


Select Menu = [CR] 
Exit = [X] 


Port 1 IPX RIP Input (Output) Filter Table 

Screen Path 

Configuration Menu 
Port Configuration 

+ 

Port Configuration Summary 
Port # 

* 

Port # Configuration 
IPX Filters 

+ 

Port # IPX Filters 
RIP Input/Output Filter Table 

+ 

Port # IPX RIP Input/Output Filter Table 
Entry Number 

+ 

IPX RIP Filter 
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Port 1 IPX RIP Input (Output) Filter 


Filter State: 
Network Address: 
Filter Mask: 


Enabled 

00000000 

FFFFFFFF 


Cursor Down = [Space Bar] 
Cursor Up = [Backspace] 


Select = [CR] 
Exit = [X] 


Port 1 IPX RIP Input (Output) Filter 
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5.4.1.6 Bridging Options 

Access the Port Bridging Options screen to configure bridging options. Screens for the LAN and 
WAN interfaces are identical. . 

Select Transmit Filter Table to display configured transmit filters for this port. See the following 
section. 
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Port # Bridging Options 


Unicast Frame Flooding: 
Transmit Multicast: 
Transmit Broadcast: 
Transmit Filter: 
Transmit Filter Table: 


Enabled 

Enabled 

Enabled 

Disabled 

>> 




Cursor Down = [Space Bar] 
Cursor Up = [Backspace] 




Select = [CR] 
Exit = [X] 


Bridging Options 


Screen Path 

Configuration Menu 
Port Configuration 

* 

Port Configuration Summary 
Port # 

* 

Port # Configuration 
Bridging Options 

* 

Port # Bridging Options 


Unicast Frame Flooding - enable/disable flooding of unicast frames on the port. 

Enabled - unicast frames with an unknown destination address can be flooded on this port. 

Disabled - no flooding will be done on this port; unicast frames with an unknown 
destination will not be transmitted . 

Default: Enabled 

Transmit Multicast - enable/disable transmission of all multicast frames on this port. 

Enabled - transmits multicast frames destined for this port. 

Disabled - discards multicast frames destined for this port. 

Default: Enabled 
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Transmit Broadcast - enable/disable transmission of all broadcast frames on this port. 
Enabled - transmits broadcast frames on this port. 

Disabled - discards broadcast frames on this port. 

Default: Enabled 

Transmit Filter - determines how the entries in the Transmit Filters Table will be used. 

Positive - frames which match at least one entry in the Transmit Filters Table will be 
forwarded; the rest are discarded. 

Negative - frames which match at least one entry in the Transmit Filters Table will be 
discarded; the rest are forwarded. 

Disabled - filters are not applied, no frames will be filtered based on the contents of the 
Transmit Filters Table. 

Default: Disabled 
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5.4.1.6.1 Transmit Filters 


The screen below illustrates the Transmit Filter Table . This screen displays up to five transmit 
filters for each port. The default configuration is for no filters to be configured. 

Transmit filters typically are applied to the Type field in the Ethernet frame to filter specific types 
of Ethernet frames. 

These filters are applied just before the frame is transmitted to the destination port, after address 
learning and bridging. This lets the filter be port specific. 

To add or edit an entry: 

1. Position the cursor on the desired entry number and press [CR]; the port's Transmit Filter 
screen is displayed. 

2. At the Transmit Filter screen, configure each parameter as required. 

3. Press [X] to return to the Transmit Filter Table. 

If a blank entry is selected in the Transmit Filter Table, and No is selected in response to the 
confirmation prompt, the entry remains blank and no entry is added to the Transmit Filter Table. 

To delete an entry, move the cursor to the entry and type [D]. 

Offset - the relative location in the frame of the two bytes to be compared with the Type Value. 
An offset of 0 would compare the filter's Type Value against the first two bytes of the destination 
address in the ethernet MAC header. 

For example, to apply the filter to the bytes in the Ethernet frame that provide the Type code, set 
the value to 12. The filter will skip the 12 bytes (0-5 and 6-11) that contain the destination and 
source addresses in the MAC header before applying the filter). See Type Value, following. 

Valid range: 0 - 1516 

Default: 12 

Type Value - the type of Ethernet frame to be filtered. This value is compared to the transmitted 
frame at the location in the frame specified by the offset value. 

Specific types of Ethernet frames can be filtered. As shown below, the MAC header of an 
Ethernet frame contains a destination address and a source address, followed by a 2-byte Type 
value: 

To filter a particular type of frame, enter the hexadecimal Type code (0000 through FFFF) for 
that frame type. Common Ethernet types are: 


Ethernet Type 

Code 

XNS 

0600 

IP 

0800 

ARP 

0806 

DEC MOP Dump/Load 

6001 

DEC MOP Remote Console 

6002 

DECNET 

6003 

DECLAT 

6004 

AppleTalk 

809B 
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Filtering is applied to any frame with a Type code that matches the value specified in the Type 
Value field. A frame that matches will be either filtered or forwarded, depending upon the setting 
of the Transmit Filter (see previous section). 


NOTE 

If you configure the Type Value parameter, you must also configure the Offset parameter to 
specify the position of the value in the Ethernet frame. 

Valid range: 0000 - FFFF 

Default: 0000 

A valid configuration is: 

Offset = 0 

Type Value = 0 
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Port 0 Transmit Filter Table 

Offset Type Value 

1. 12 0x0800 

2 . 

3. 

4 . 

5. 


\ 


Page Down = [+] 
Page Up = [-] 


Delete = [D] 


Select Menu = [CR] 
Exit = [X] 


^' 

Port Transmit Filter Table 

Screen Path 

Configuration Menu 
Port Configuration 

+ 

Port Configuration Summary 
Port # 

Port # Configuration 
Bridging Options 

Port # Bridging Options 
Transmit Filter Table 

+ 

Port # Transmit Filter Table 
Entry Number 

+ 

Transmit Filter 
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5.4.1.7 Encryption Options (Frame Relay and PPP) 

Use the Port Encryption Options screen to configure encryption options for the WAN interface. 
Encryption applies only if the router has the optional encryption hardware installed. 

NOTES 

Restricted Access - The Encryption Options screen is not available unless the user has entered 
the Key Password to access the management screens (see Password) . This applies to terminal 
or Telnet access. 

To activate encryption options, Encryption must be Enabled on the Port Configuration screen. 

The Routermate Plus can encrypt data using the Data Encryption Standard (DES) algorithm. The 
DES algorithm is implemented in optional hardware, and uses a 56-bit key to convert clear text 
into encrypted form. Although the DES technique is well known, it is very difficult to recover the 
original data without the key used to encrypt it. To recover the original data, the DES algorithm 
is run in reverse, using the original encryption key. The security of the data is based on secrecy of 
the key used in its encryption. It is important to minimize exposure of the encryption key, and to 
change it regularly. 

Prior to transmission over Frame Relay, the router encrypts all but the first two bytes of each 
frame. On reception, the receiving router applies DES to recover the original frame contents. It 
is important that both ends of the PPP link (or PVC if Frame Relay) use the same DES key. 

When using Frame Relay, the LMI traffic is sent and received in the clear. 

To enhance security of key distribution, the router uses the DES algorithm to encrypt and decrypt 
the keys themselves. The encryption keys can be entered in either a clear or encrypted form. The 
router keeps all keys in encrypted form and decrypts them only just prior to their use in encrypting 
or decrypting data frames. It is highly recommended that keys be managed only in their encrypted 
form. Use of the clear DES key is unnecessary. 

To eliminate downtime experienced when changing encryption keys, the router provides a way to 
simultaneously update the keys in multiple routers. Keys can be entered as Pending Keys and a 
Key Update Time can be set. When the Key Update Time arrives, all routers convert their 
Pending Keys into the active Current encryption keys. Synchronizing the clocks of the routers 
allows key changes to happen at the same time. 

To configure DES encryption of a PPP link: 

1. Log out, then log back into the terminal interface screens using the Key Password (default is 
[CR]). 

2. If the time shown in the top right corner of the screen is not correct, go to the Unit screen and 
set it to the correct time. 

3. Go to the Port Configuration screen and enable encryption. 


NOTE 

It is possible to directly change the Current Key, but as soon as this new Current Key is 
confirmed, the WAN link will not pass data traffic until the remote router's Current Key is set 
to the same value. 
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4. On the Encryption Options screen enter a DES key as a Pending, Encrypted key. Although the 
key seems to be known, it will be DES decrypted prior to use. Thus, the key which is 
ultimately used to encrypt and decrypt data is really unknown, and likely more random than the 
key which is entered. 

5. Exit these screens and confirm the changes. 

6. Access the Encryption Global Configuration screen and enter the Key Update Time, which is 
the time in the future at which the new (Pending) encryption key takes effect. Exit from the 
screen and confirm the change. The Key Update Time should now be displayed in the top left 
comer of the terminal display. 

7. Prior to logging out, save the configuration, so that the key configuration will not be lost 
should a power interruption occur. 

8. Perform the same steps (1..7) in the remote router(s). Be sure that the identical encryption key 
is entered. Also be sure that the Key Update Time is effectively the same for each router. To 
avoid time zone conflicts, it is good policy to set the clocks in all interconnected routers to a 
universal time, rather than use local time. 

At the Key Update Time, the new keys will be implemented and the Key Update Time erased 
from the top left comer of the screen display. From that point, the data on the WAN interface 
will be secured by DES encryption. 

Current Key - the DES encryption key which is currently in active use. 

Pending Key - the DES encryption key which is pending, awaiting the next Key Update Time, at 
which time it will be copied into the Current Key field and become the active encryption key. 

Encrypted Key - the encrypted form of the current or pending DES encryption key. This key is 
internally decrypted prior to its use to encrypt and decrypt frame data transmitted and received on 
the WAN interface. The intent is to enter and distribute all DES keys in their encrypted form. 

Valid range: 00 00 00 00 00 00 00 00 to FF FF FF FF FF FF FF FF 

Default: 00 00 00 00 00 00 00 00 (disables encryption) 

Clear Key - provides an alternate way to configure the current or pending DES encryption key. 
When entering this key, all zeros are displayed and it is immediately encrypted and displayed in 
the Encrypted Key field. It is normally unnecessary and undesirable to enter the encryption key in 
clear form. 

Valid range: (DES) 00 00 00 00 00 00 00 00 to FF FF FF FF FF FF FF FF (DES) 

(E-DES) _0 00 _0 00 _0 00 _0 00 to _F FF _F FF _F FF _F FF 

NOTE 

In the E-DES (proprietary) version, the cursor skips over the underlined (blank) spaces 
because they are not configurable. 

Default: 00 00 00 00 00 00 00 00 (disables encryption) 

If entering keys in clear form, it is recommended to avoid these known weak keys: 

00 00 00 00 00 00 00 00 (no key defined) 

00 00 00 00 FF FF FF FF 
FF FF FF FF 00 00 00 00 
FF FF FF FF FF FF FF FF 
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Port 1 Encryption Options 


Current Key: 
Pending Key: 


Clear Key 

00 00 00 00 00 00 00 00 
00 00 00 00 00 00 00 00 


Encrypted Key 
00 00 00 00 00 00 00 00 
00 00 00 00 00 00 00 00 


Cursor Down = [Space Bar] 
Cursor Up = [Backspace] 


Edit Field = [CR] 
Exit = [X] 


Encryption Options (Frame Relay and PPP) 


Screen Path 

Configuration Menu 
Port Configuration 

+ 

Port Configuration Summary 
Port # 

Port # Configuration 
Encryption Options 

+ 

Port # Encryption Options 
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5.5 Global Configuration 


Use the Global Configuration screen to access global configuration parameters for the router. 
Global parameters are not port-specific; they apply to all interfaces on the router. 

NOTE 

Encryption applies only if the router has the optional encryption daughter card installed. 

For units that include the optional encryption feature, the Encryption Options screen cannot be 
accessed and encryption options cannot be configured unless the Key Password is used to access 
the management screens. This applies to terminal or Telnet access of the management screens. 

See the following sections for details on each of the global configuration screens: 

IP Global Configuration 

IPX Global Configuration 
Bridging Global Configuration 

PPP Global Configuration 
Encryption Global Configuration 
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Global Configuration 


IP Global Configuration 
IPX Global Configuration 


Bridging Global Configuration 


PPP Global Configuration 
Encryption Configuration 


Cursor Down = [Space Bar] 
Cursor Up = [Backspace] 


Select Menu = [CR] 
Exit = [X] 





Global Configuration 


Screen Path 


Configuration Menu 
Global Configuration 


Global Configuration 
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5.5.1 IP Global Configuration 

Access the IP Global Configuration screen to configure global IP options. 

Select the Static Route Table to configure static routes for routing. See IP Static Routes in next 
section. 

Select the RIP Neighbor List Table to enter or edit IP addresses of directly-connected routers 
(any adjacent router) from which IP RIP update packets will be accepted. See IP RIP Neighbor 
List Table. 
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IP Global Configuration 




Default Route Port: 
Default Route Address: 

Disabled 

Default Route Metric: 

1 

Static Route Table: 

>> 

RIP Neighbor List: 

Disabled 

RIP Neighbor List Table: 

>> 

BootP Seconds Threshold: 

30 

BootP Hops Threshold: 

4 

Subnet Zero: 

Disabled 


Cursor Down = [Space Bar] Edit Field = [CR] 

Cursor Up = [Backspace] Exit = [X] 




IP Global Configuration 


Screen Path 

Configuration Menu 
Global Configuration 

* 

Global Configuration 
IP Global Configuration 

* 

IP Global Configuration 

Default Route Port - the default port for IP routing. Enter the port number to which packets are 
to be forwarded when the destination address in the packet is unknown. When default routing is 
enabled, an entry with a destination of 0.0.0.0 is put in the routing table. This entry is advertised 
out all the other ports that have IP routing and RIP enabled (unless filtering is enabled). When set 
to port 0, the Default Route Address value is displayed. When set to a value other than port 0, 
the Default Route Address value is blanked out. 

Valid input: Disabled or range of configured ports 

Default: Disabled 

Default Route Address - enter the IP address of the router to which packets are to be forwarded 
when the destination address in the packet is unknown. The host portion of the address cannot be 
all zeros. If an incorrect address is entered, the “Invalid Address“ message is displayed if Yes is 
entered at the save configuration prompt. The router automatically resolves the IP address to a 
port number via the IP Routing Table. 

Default: 0.0.0.0 (disabled; no address defined) 
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Default Route Metric - sets the weight (number of hops) associated with the default route. This 
determines the number of hops to enter in the IP Routing Table for the default route (0.0.0.0). 

Valid input: 1 to 15 

Default: 1 

RIP Neighbor List - enable/disable use of the RIP Neighbor List Table. RIP Neighbor List 
cannot be used on Unnumbered links. 

Enabled - the RIP Neighbor List specifies the directly connected routers that routing 
update packets are accepted from. 

Disabled - routing updates are accepted from all neighbors. 

Default: Disabled 

BootP Seconds Threshold - the BootP message contains a field that the booting machine fills in 
with the number of seconds since it began to boot. If the BootP Threshold Seconds filter is set, 
the router will not forward any BootP for a machine that booted more than x seconds ago. This is 
useful if a machine doesn't get a BootP reply, but keeps retrying for a long period of time. 

Valid range: 1-300 

Default: 30 

BootP Hops Threshold - the BootP message has a field called Hops that is incremented by each 
router that forwards the message. The BootP Threshold Hops says to discard any BootP message 
whose Hops counter is greater than the configured value. 

Valid range: 1-15 

Default: 4 

Subnet Zero - this option determines: 

• If a subnet zero route will be learned. 

• If the subnet portion of the Address can be set to zero on the IP Port Configuration screen. 

• If the subnet portion of the Destination (address of target router or network) can be set to zero 
on the IP Static Route configuration screen. 

Valid input: Enabled or Disabled 

Default: Disabled 


NOTE 

Using Subnet Zero is discouraged because of the possibility that confusion could exist 
between a network route and a subnet route that have the same address. For example, if 
network 130.110.0.0 is subnetted as 255.255.255.0, the subnet zero route would be 
130.110.0.0 which is the same as the network route. 
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5.5.1.1 IP Static Routes 


The IP Static Route Table lists static (user-defined) routes. Create a static route if the router 
cannot dynamically build a route to the destination (e.g., the route is to a router that does not 
implement RIP), or to reduce the amount of traffic used to exchange routing information. RIP 
announces static routes to other routers (unless filtering is enabled). 

The maximum number of entries is 30. If more than 15 static routes are configured, use [+] and 
[-] to scroll between screens. 

To add or edit an entry: 

1. Position the cursor on the desired entry number and press [CR]; the IP Static Route screen is 
displayed. 

2. At the IP Static Route screen, configure each parameter as required. 

3. Press [X] to return to the Static Route Table. 

Destination - the IP address for the target router or network. The host portion must be set to 
zero. 

Default: 0.0.0.0 

Subnet Mask - if IP subnetworking is used, identifies the parts of the IP address that are used for 
the network, subnetwork, and host numbers. 

If IP subnetworking is not used, ensure that this field is set to one of the following to match the 
network class of the configured IP address: 

Network Class Subnet Mask 

A 255.0.0.0 

B 255.255.0.0 

C 255.255.255.0 

Default: 255.255.255.0 

Outgoing Port - identifies the port number for the static route. 

Valid input: Any configured port 

Next Hop - the IP address of the next router in the path toward the destination. The Next Hop 
address must be on a directly-connected network. The host portion cannot be set to all zeros. 

The Next Hop address is only displayed for a route that points towards the LAN (port 0); the 
Next Hop address is blanked out when the Outgoing Port is greater than 0. 

Default: 0.0.0.0. (not a valid host number) 

Metric - the number of hops (intervening routers) between the source network and the 
destination network. 

Valid input: 1 to 15 

Default: 1 
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IP Static Route Table - Page 1 


9 

10 

11 

12 

13 

14 

15 

Cursor 

Cursor 


Destination 

128.000.0.0 

129.102.0.0 

139.102.0.0 

149.102.0.0 

159.102.0.0 

169.102.0.0 

105.0.0.0 

108.0.0.0 


Subnet Mask Port Next Hop Metric 

255.255.0.0 0 118.0.0.12 2 

255.255.0.0 0 118.0.0.12 4 

255.255.0.0 0 118.0.0.12 5 

255.255.0.0 0 118.0.0.12 15 

255.255.0.0 0 118.0.0.12 4 

255.255.0.0 0 118.0.0.12 9 

255.0.0.0 1 0.0.0.0 2 

255.0.0.0 1 0.0.0.0 2 


Down = [Space Bar] 
Up = [Backspace] 


Delete = [D] 
Page = [+][-. 


Select Menu = [CR] 
Exit = [X] 


IP Static Route Table 


Screen Path 

Configuration Menu 
Global Configuration 

* 

Global Configuration 
IP Global Configuration 

+ 

IP Global Configuration 
Static Route Table 

+ 

IP Static Route Table 
Entry # 

+ 

IP Static Route 
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IP Static Route 


Destination: 
Subnet Mask: 
Outgoing Port: 
Next Hop: 
Metric: 


0 . 0 . 0.0 
0 . 0 . 0.0 
0 

0 . 0 . 0.0 
1 


Cursor Down = [Space Bar] 
Cursor Up = [Backspace] 


Edit Field = [CR] 
Exit = [X] 
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5.5.1.2 IP RIP Neighbor List Table 

Access the IP RIP Neighbor List Table to enter or edit IP addresses of directly-connected routers 
(any adjacent router) from which IP RIP update packets will be accepted. 

Press [CR] to edit an address. 

Valid range: 0.0.0.0. to 255.255.255.255 

Default: 0.0.0.0 

To delete an address, position the cursor on that entry and press [D]; the default address (0.0.0.0) 
is displayed. 
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IP RIP Neighbor List Table 

1. 123.123.123.123 

2 . 0 . 0 . 0.0 

3. 0.0.0.0 

4. 0.0.0.0 

5. 0.0.0.0 

6 . 0 . 0 . 0.0 

7. 0.0.0.0 

8 . 0 . 0 . 0.0 

9. 123.123.123.122 
10 . 0 . 0 . 0.0 


Cursor Down = [Space Bar] 
Cursor Up = [Backspace] 


Delete = [D] Edit Field = [CR] 

Exit = [X] 


V 


IP RIP Neighbor List Table (LAN) 


Screen Path 

Configuration Menu 
Global Configuration 

* 

Global Configuration 
IP Global Configuration 

* 

IP Global Configuration 
RIP Neighbor List Table 

+ 

IP RIP Neighbor List Table 
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5.5.2 IPX Global Configuration 


Access the IPX Global Configuration screen to configure global IPX options. 

Internal Network Number - only used during IPXWAN initial negotiation to determine master 
slave roles. The router with the higher Internal Network Number is the master. IPXWAN is 
described in RFC 1634. 

Valid input: 32-bit hex range 00000000 to FFFFFFFF 

Default: the value equal to the last 32 bits of the LAN interface’s MAC address . 

Gap Time - the minimum delay, in units of 55 milliseconds, between successive RIP or SAP 
messages. This option is provided because older Novell Servers may have a problem processing a 
series of RIP or SAP messages if the inter packet gap is not sufficient. 

Valid input: 1 to 255 ticks (1 tick is 55 milliseconds). 

Default: 2 ticks 
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IPX Global Configuration 


Internal Network Number: 
Gap Time: 


00000000 
2 ticks 


Cursor Down = [Space Bar] 
Cursor Up = [Backspace] 


Edit Field = [CR] 
Exit = [X] 





IPX Global Configuration 


Screen Path 


Configuration Menu 
Global Configuration 


Global Configuration 
IPX Global Configuration 


IPX Global Configuration 
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5.5.3 Bridging Global Configuration 

Access the Bridging Global Configuration screen to configure global bridging options. 

View the Static Address Table in the following section. 

The Address Learning and Forwarding Mode options determine the default bridging action as 
follows. Entries in the Static Address Table cause the opposite action of the default action. 


Configuration 

Default Action 

Address Fearning: Enabled 

Permit All 

Forwarding Mode: Normal 

Address Fearning: Disabled 

Deny All 

Forwarding Mode: NA 

Address Fearning: Enabled 

Deny All 

Forwarding Mode: Restricted 


Address Learning - enables/disables address learning. 


Enabled - the unit automatically learns source addresses. Frames with an unknown 
destination are broadcast. 

Specifically, when an Ethernet frame is received and address learning is enabled, the unit 
looks in its address table for the received frame's destination address. If the destination 
address is located, the frame is forwarded. If the destination address is not located, then the 
frame is broadcast. 

Disabled - frames will be forwarded only between statically entered addresses. Frames 
destined for addresses which are not in the address table will be discarded. Broadcast and 
Multicast frames from an unknown source are still flooded. Flooding broadcast frames 
from an unknown source is required for ARP to work across the bridge. 

Default: Enabled 

Forwarding Mode - used in conjunction with the Static Address Table (when address learning is 
enabled) to control which devices can communicate, as follows: 

Normal - any device can communicate with any other device since address learning is 
enabled. A specific device can be prevented from communicating by adding the device's 
MAC Address to the Static Address Table and setting Action to Filter for that address; the 
bridge will not forward frames from or to this address. 

Restricted - the bridge only forwards frames which are either sourced or destined to a static 
address table entry. Fearning is not affected, so a frame transmitted from a 
statically-entered source address to an unknown destination will be flooded. Frames are not 
forwarded between two learned addresses. When forwarding is restricted, broadcasts (not 
multicasts) will be flooded either if the source address is known or the broadcast is from the 
WAN. Flooding broadcast from an unknown source is required for ARP to work across 
the bridge. 

Default: Normal 
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WAN to WAN Forwarding - enables/disables bridging of frames between two wide area 
networks. 

Enabled - frames received from a WAN port can be broadcast or flooded to the other 
WAN ports. 

Disabled - frames received from a WAN port are not broadcast or flooded to another 
WAN port. 

Default: Enabled 

Address Aging Time - a process for determining how long an address which has not been used 
will remain in the address table. The time entered here is the maximum time that an automatically 
learned address can remain inactive before it is deleted. 

The bridge can accommodate 2047 addresses. If the network is small and it is unlikely that the 
maximum number of addresses will be learned, set the aging time to a high number (31 days is the 
maximum). If the network is large, decrease the aging time so inactive Ethernet addresses are 
deleted, making more room for new addresses. 

Decrease the aging time if the Ethernet devices are frequently moved between LANs. This lets 
the address be aged out and relearned at the new location. 

If the aging time is set too low, the bridge might need to relearn addresses frequently, which can 
affect performance. 

When editing the time, use two digits each for days, hours, and minutes. The colons (:) do not 
have to be typed between numbers. 

Valid Range: 0-32 days:0-23 hours:0-59 minutes 

Default: 00:01:00 (1 hour) 


- 154 - 



Osicom Technologies 
ROUTERmate-EX Executive Router 


Bridge Global Configuration 


Address Learning: 
Forwarding Mode: 

WAN to WAN Forwarding: 
Address Aging Time: 


Enabled 

Normal 

Enabled 

00:00:00 (dd:hh:mm) 


Static Address Table: 


Cursor Down = [Space Bar] 
Cursor Up = [Backspace] 


Select = [CR] 
Exit = [X] 


Bridging Global Configuration 


Screen Path 

Configuration Menu 
Global Configuration 

* 

Global Configuration 
Bridging Global Configuration 

* 

Bridging Global Configuration 


- 155 - 





5.5.3.1 Bridging Static Addresses 

Access the bridging Static Address Table to display static addresses and to access the Static 
Address configuration screen. 

When address learning is disabled, the bridge forwards only those frames that are to MAC 
Addresses configured in this table. 

When address learning is enabled, the bridge forwards all frames except those that are to or from 
addresses that are both in the Static Address Table and are set to Filtered. 

Forwarding and filtering are applied to a frame when the frame is received. 

There can be up to 60 entries in the Static Address Table. When there are more than 15 entries, 
press [Page Down] or [+] and [Page up] or [-] to scroll between pages of addresses. 

To add or edit an entry: 

1. Position the cursor on the desired entry number and press [CR]; the Static Address 
configuration screen is displayed. 

2. At the Static Address configuration screen, configure each parameter as required. 

3. Press [X] to return to the Static Address Table. 

To delete an entry, move the cursor to the desired entry number and press [D]. 

MAC Address - the Ethernet address (48-bit hexadecimal text) for the entry. Frames from or to 
this device are filtered or forwarded depending on the setting of the Action field. Setting the 
address to 0 deletes the entry. 

Range: 00:00:00:00:00:00 - FF:FF:FF:FF:FF:FF 

Default: 00:00:00:00:00:00 

Action - disposition of frames either destined to or sourced from the specified MAC Address, as 
follows: 

Filter - all frames to or from the specified MAC Address are filtered (not forwarded). 

Forward - all frames destined for the specified MAC Address are forwarded to the 
specified port. See Port, following. 

Default: Forward 

Port - port number where frames are forwarded based on their destination address. Frames that 
contain the specified MAC address in the frame's destination field are forwarded to this port; 
frames that contain the specified MAC address in the source field should be received on this port. 
The Port value is ignored when the Action is set to Filter. 

Valid range: 0- 14 

Default: 0 
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5.5.4 PPP Global Configuration 


Access the PPP Global Configuration screen to configure global PPP options. 

When you press [CR] at an option, follow the prompts at the bottom of the screen. 

Restart Timer - used to time transmissions of Configure-Request and Terminate- Request 
packets. Expiration of the Restart timer causes a Timeout event, and retransmission of the 
corresponding Configure-Request or Terminate-Request packet, packets. 

Valid input: 1 to 10 seconds 

Default: 3 s 

Maximum Number Of Termination Requests - the number of Termination Request packets 
that can be sent without receiving a Terminate Acknowledge, before assuming that the peer is 
unable to respond. 

Valid input: 1 to 100 

Default: 2 

Maximum Number Of Configuration Requests - the number of Configuration Request packets 
that were sent without receiving a valid Configuration Acknowledged, Configuration Not 
Acknowledged, or Configuration Reject before assuming that the peer is unable to respond. 

When this threshold is reached, the counter is reinitialized and the link initialization is started 
again. 

Valid input: 2 to 100 
Default: 10 
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5.5.5 Encryption Global Configuration 

Use this screen to configure global encryption options . 

Key Update Time - the time at which all Pending Keys will become the active Current Keys. Its 
purpose is to synchronize the changing of the DES encryption keys of all interconnected routers. 
Only ports with encryption enabled are updated. 

Valid input: 00:00:00 to 24:00:00 (HH:MM:SS) 

Default: 00:00:00 (disables timer) 


To use this timer, perform these steps for each router using encryption: 

1. Make sure the router's clock is set correctly. 

2. Configure Pending Keys for each port. See Encryption Options . 

3. Set this option for the time of day to update the encryption keys. 

4. Exit the screen and confirm the configuration. 

When the system time reaches the Key Update Time, the Key Update Time is reset to 00:00:00 
and all pending keys on ports with encryption enabled automatically overwrite the current keys. 

Valid input: 00:00:00 to 24:00:00 (hh:mm:ss) 


Default: 00:00:00 (disables this feature) 


' 12 :30 : 00 


Osicom Technologies 12:00:00 

ROUTERmate-EX Executive Router 

Encryption Global Configuration 

Key Update Time: 12:30:00 (hh:mm:ss) 


NOTE 

If a DES-KEY-LIC (encryptor key license) has been purchased and 
implemented, two additional selections will appear on this screen when 
the user enters the appropriate password upon accessing the management 
screens. 

• Master Key Configuration 

• Initial Vector Configuration 

Call an Osicom sales representative at 1-888-674-2668 or 1-800-367-2729 
for ordering information. 
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6. CONFIGURATION 
AND SOFTWARE 
UPDATE (TFTP) 


Start of Document 


• 6.1 Screen Structure. TFTP 

• 6.2 Configuration and Software Update 

This section illustrates and describes the router's Configuration and Software Update screens. 
Access these screens to transfer configuration and software files between the router and a TFTP 
(Trivial File Transfer Protocol) server. Configuration and software file transfers can be performed 
across the LAN or WAN from a local or remote server. 

Software files contain the operating system; configuration files consist of the parameters and 
options. 

After reading this section, the user will be able to send files to a TFTP server and get files from a 
TFTP server. 


6.1 Screen Structure, TFTP 

The organization of the TFTP screens is shown below. Position the cursor on the TFTP selection 
at the Main Menu and press [CR] to access the Configuration and Software Update screen . 
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Screen Structure, TFTP 
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6.2 Configuration and Software Update 


NOTES 

1. If sending a file to the server, the file must already exist on the server, and the file must have 
read/write privileges for everyone. 

2. An unreliable file will result if the file on the server is larger than the file being sent. The file 
being sent will not overwrite the entire file on the server; instead, the file being sent will 
overwrite only a portion of the file on the server. The result will be a file made up of parts 
of both files. 
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1. Enter the server's address and filename on the Server Address and Filename configuration 
screen . 

2. Press [X] to return to the Configuration and Software Update screen. 

If a transfer is attempted without setting the Server Address and Filename, the following messages 
may be displayed: 

Filename Missing 

Server Address Missing 

Filename and Server Address Missing 

When this occurs, the cursor is positioned on the Server Address and Filename choice. Press 
[CR] to display the Server Address and Filename configuration screen. 
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Server Address - server's IP address. 

Default: 0.0.0.0 (not configured). 

Filename - text string; alphanumeric, 50 characters maximum. 
Default: Blank (not configured). 
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Position the cursor on the desired Send or Get command (see screen below) and press [CR] to 
initiate the file transfer. 

To abort the file transfer, press either Ctrl-X, Ctrl-N, or Ctrl-T. 

If a transfer is stopped, the user should wait until the server times out before initiating another 
TFTP session. 


NOTE 

Selecting any command causes a status message and percentage complete prompt to be 
displayed. When the transfer is complete or stops, the percentage complete is cleared. 
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The screen below illustrates a Get Configuration From TFTP Server process. 

If you select Yes to "Save Download to Flash," the configuration download is saved to flash and 
you are prompted to restart. 


If you select No to "Save Download to Flash," the configuration download is deleted from RAM 
and the file transfer is discarded. The cursor returns to the Get Configuration From TFTP Server 
command. 
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The screen below illustrates a Get Software From TFTP Server process. If you select Yes to 
"Save To Flash and Restart," the software download is saved to flash and the router is restarted 
using the new software. 

If you select No to "Save To Flash and Restart," the software download is deleted from RAM and 
the file transfer is discarded. The cursor returns to the Get Software From TFTP Server 
command. 
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The screen below illustrates a Send Software To TFTP Server process. 
If the file transfer fails, the "cause of failure" is displayed. 

A Send Configuration To TFTP Server process operates the same way. 
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7. MODEM 

CONFIGURATION 

SCREENS 


Start of Document 


• 7.1 Screen Structure. Modem 

• 7.2 Modem Parameters 


This section illustrates and describes the router's Modem configuration menu. This screen will 
appear only if the optional V.32 modem is installed. Use this screen to configure the modem for 
dial-in management of the router’s console screens. Dial-in console access takes priority over 
local console and Telnet access. 


This text also serves as a reference tool for defining the various parameters and options appearing 
on the screens. 


- 167 - 







7.1 Screen Structure, Modem 

The organization of the Modem menu is shown below. Position the cursor on the Modem 
selection at the Main Menu and press [CR] to access the Modem menu . 
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7.2 Modem Parameters 


Modem Mode - access the WAN 2 interface or the console screens of the router. This 
parameter is currently fixed at Console. Dial-in console access takes priority over local and 
Telnet console access. 

Default: Console 

Modem Security - enable/disable security password to access the router through the modem. 
Default: Disabled 


NOTE 

If using Osicom’s 4532 or 4232 modem, you can enable Modem Security to prevent an 
unauthorized connection. If using a modem other than Osicom’s 4532 or 4232 modem. 
Modem Security must be disabled. 


Security Password - the password exchanged between the integral modem and the calling 4532 
or 4232 when Modem Security is enabled. 

Valid input: up to eight alphanumeric characters; case sensitive. 

Default: password 

Auto Answer - enable/disable the integral modem to automatically answer a dial-in call. This 
parameter must be enabled to allow dial-in access to the management screens. 

Default: Enabled 
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8. UNIT 

CONFIGURATION 

SCREENS 


Start of Document 


• 8.1 Screen Structure. Unit 

• 8.2 Unit Parameters 

□ 8.2.1 System Restart 

□ 8.2.2 System Information 

□ 8.2.3 Service Information 


This section illustrates and describes the router's Unit menu. Use this screen to configure the 
following supervisory functions: 

• Header lines on the terminal screens 

• Inactivity timeout 

• System time 

• Passwords (console, encryption, and dial-in management) 

Also access the System Restart, System Information, and Service Information screens. 

This text also serves as a reference tool for defining the various parameters and options appearing 
on the screens. 
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8.1 Screen Structure, Unit 

The organization of the Unit menu is shown below. Position the cursor on the Unit selection at 
the Main Menu and press [CR] to access the Unit menu. The following screen illustrates the Unit 
screen for a router with an integral modem for dial-in management and encryption hardware 
installed. 
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Parameters will differ depending upon hardware options installed. 
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8.2 Unit Parameters 


Use the Unit menu to edit the two header lines that appear on all screens and perform other 
supervisory functions. 

Also access the System Restart screen , the System Information screen , and Service Information 
screen . 

To configure a parameter by typing a value: 

1. Press the [Space Bar] or [Backspace] to move the cursor to the desired parameter. 

2. Press [CR] to highlight the field. 

3. Type the value. 

4. Press [CR] again to exit the field. 

To restore the parameter to its original contents, press [Esc] before exiting the field. 

Unit menu parameters are defined below. Note that certain parameters are displayed only for 
specific hardware versions of the Routermate Plus. 

Header Line 1, Header Line 2 - these two fields let you modify the text that appears in the first 
two lines of each screen. Press [CR] to highlight the field, enter the new header, then press [CR] 
again when you are finished. 

Valid input: Up to 40 alphanumeric characters; spaces are permitted anywhere in the field. 
Default: Osicom Technologies 

ROUTERmate-EX Executive Router 

Inactivity Timeout - time, in hours and minutes, during which if there is no keyboard activity, 
the console is deactivated, or the Telnet connection is terminated. This parameter is for terminal 
and Telnet users only. Access to the management screens is then restricted to persons who can 
enter the password. 

Valid input: 00:00 (disables timer) to 23:59. Type the time as a continuous 4-digit number 
in the format hh:mm. You do not have to type the colon. 

Default: 00:05 

Console Password - for terminal and Telnet operation only; sets a password that restricts access 
to the management screens. Entering the Console Password allows the user access to all the 
screens except the encryption screens. 

Valid input: Up to 16 alphanumeric characters, case-sensitive. Spaces can be used, but a 
space cannot be used as the first or last character. 

A Telnet user has three attempts and thirty seconds to enter the correct password; if unsuccessful, 
the session is disconnected. 

Default: [CR] 


System Time (displayed only when encryption option is installed) - the system time in hours (hh) 
minutes (mm) and seconds (ss). You do not have to type the colons [:]. When configured, the 
time is displayed in the upper, right comer of the screens. 
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Key Password (displayed only when encryption hardware is installed) - enter the Key Password 
for access to all the screens. 

Valid input: Up to 16 alphanumeric characters, case-sensitive. Spaces can be used, but a 
space cannot be used as the first or last character. 

To configure the password, press [CR] to highlight the field, and type the new password. If you 
make a typing error use [Backspace] to move the cursor to the left, and re-type the correct 
characters. Press [Esc] before exiting the field to return the password to its previous setting. 

Press [CR] to exit the field after typing the new password. 

The new password is not displayed on the screen. A string of asterisks (*) indicates that a 
password is configured. 

A Telnet user has three attempts and thirty seconds to enter the correct password; if unsuccessful, 
the Telnet session is disconnected. 

Default: [CR] 
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8.2.1 System Restart 


The System Restart screen supports three types of restarts, including one with software 
downloads. 

Selecting a restart command causes a confirmation box to appear. If you select Yes, the 
following message appears: 

Please wait - type of restart in progress 

NOTE 

A Telnet session is closed once any restart is initiated. Following a defaults restart, you must 
re-enter the IP address from a local terminal before another Telnet connection can be made. 


Cancel - exit the screen. 

System Restart - this restart is equivalent to powering the router off and on. Configuration 
parameters are not affected. 

Defaults Restart - select this option to change all configurable parameters to their default values. 
This includes the Console and Key passwords but does not include the Master key or Initial 
Vector passwords. 
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Restart SW Download - Use BootP - when this command is selected, the router restarts, runs 
the boot image, and sends out a BootP request. The information in the BootP response from the 
BootP server is used to automatically perform the TFTP transfer. Once the image file is 
successfully transferred, the unit runs the full image and uses the configuration stored in the 
database, including the LAN IP address. If the transfer is unsuccessful, the unit discards the file 
and runs the existing full image. 

The advanatge of using this command over the Get Software From TFTP Server in the TFTP 
menu is that the server address and filename do not need to be known. 


NOTES 


1. The Restart SW Download - Use BootP command can only be performed across the 
LAN because the WAN is not operational when running from the boot sector. 

2. The Restart SW Download - Use BootP command can only be used to retrieve a file from 
a remote server if the router that leads to the remote BootP server supports BootP Relay. 
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The following two screens illustrate a restart and software download in progress . 


Software download can only be performed across the LAN because the WAN is not operational 
when running from the boot sector. 
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The message shown in the screen below is displayed if any restart command is selected when 
there are unsaved configuration changes. Selecting No clears the message and returns the cursor 
to last position. 
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8.2.2 System Information 

Select System Information at the Unit screen to view the System Information screen . 

This screen displays software and hardware options integral to the router. 

Software Version - the revision level of the router's firmware. 

Software Checksum - 32-bit CRC checksum of operational software. 

Boot Sector Version - the revision level of the boot sector firmware. 

WAN 2 Daughter Card Type - hardware option for WAN 2 interface. 

Valid options: None, V.32, ISDN U 

Encryption Daughter Card Type - hardware option for encryption. 

Valid options: None, Standard, High Performance, Proprietary Standard, Proprietary 
High Performance 

Compression Daughter Card Type - hardware option for compression. 

Valid options: None, Standard, High Performance 
RAM Size - number of bytes of memory. 

Valid options: 4 M 

Flash Size - number of bytes of memory used to store configuration and software image files. 
Valid options: 1 M 
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8.2.3 Service Information 

Select Service Information at the Unit screen to display the Service Information screen. 

This screen provides address, telephone, fax, e-mail, and web site numbers for contacting service 
personnel. 
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E-Mail: support@osicom.com 

WWW: www.osicom.com 
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9. MANAGEMENT 
CONFIGURATION 
SCREENS 


Start of Document 


• 9.1 Screen Structure, Management 

• 9.2 Management Parameters 

□ 9.2.1 SNMP Trap Client Table 

□ 9.2.2 Traps 


This section describes the router's Management menu. Use this screen to enable Telnet access, 
configure SNMP (Simple Network Management Protocol) options, and access the SNMP Trap 
Client Table. 

This text also serves as a reference for defining the parameters and options appearing on the 
screens. 


NOTE 

SNMP management capabilities: 

• Router - standard MIB II 

• Encryption - enterprise MIB 
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9.1 Screen Structure, Management 

The organization of the Management menu is shown below. Position the cursor on the 
Management selection at the Main Menu and press [CR] to access the Management menu . 
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9.2 Management Parameters 

Telnet Server - enable/disable Telnet access to the management screens. 

Default: Enabled 

SNMP R/O Community - the community string used for read-only access to the router's MIB 
objects. 

Valid input: Up to 40 alphanumeric characters 
Default: public 

SNMP R/W Community - the community string used for read-write access to the router's MIB 
objects. If this is set to the same value as the read-only string, write access is prevented. 

Valid input: Up to 40 alphanumeric characters. 

Default: private 

Authentication Traps - enable/disable authentication traps sent by the router when an SNMP 
request is received with an invalid community string. A trap is an unsolicited alarm or event. 

Enabled - allows alarm messages. 

Disabled - prevents alarm messages. 

Default: Disabled 

Autolearn Clients - enable/disable the router's ability to automatically learn the IP addresses of 
SNMP management stations (clients) to whom SNMP traps are to be sent. 

Enabled - the SNMP Trap Client Table lists the management stations that will receive traps 
from the router. The router automatically learns the IP addresses of SNMP management 
stations that access it. Learned addresses are added to the table, which can contain up to 16 
addresses. If the table contains any static addresses, then the number of addresses that can 
be learned is 16 minus the n umber of configured static addresses. 

Disabled - the SNMP Trap Client Table lists the management stations that can access the 
router’s SNMP agent, and the management stations that will receive traps from the router. 
SNMP access is limited to only the hosts that are listed in the table. See the SNMP Trap 
Client Table in the following section. 

Default: Enabled 
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9.2.1 SNMP Trap Client Table 

A trap client is an SNMP management station to which SNMP traps are routed. A trap client is 
identified by configuring an IP address for each of up to 16 SNMP management stations. 

Move cursor between columns by using left/right arrows or Tab/Shift-Tab. 

IP addresses for trap clients can be configured manually, or automatically learned. 

For automatic address learning, see Autoleam Clients in previous section. Any addresses that are 
not entered manually can be learned automatically. 

Trap client addresses can be configured manually using SNMP management or from a terminal at 
the SNMP Trap Client Table screen . 

If it is desirable to limit the management stations to which traps are sent, the IP addresses for 
those management stations can be configured manually and the autoleam feature disabled. Only 
those management stations whose IP addresses have been configured manually will receive traps 
from the router. 


Client Address - the IP address for the SNMP management station to which SNMP traps are to 
be sent. Default value is 0.0.0.0 (no entry configured). 


Type - the Type field is read only. It identifies a trap client as one of the following: 

Dynamic - the IP address for this trap client was learned automatically from an incoming 
SNMP message. 

Static - the IP address for this trap client was configured manually. 


no address is assigned. 


r 


Osicom Technologies 
ROUTERmate-EX Executive Router 


SNMP Trap Client Table 


Client Address 

Type 

Client 

125.0.0.1 

Static 

125.0. 

125.0.0.2 

Static 

o 

o 

o 

125.0.0.3 

Dynamic 

o 

o 

o 

125.0.0.4 

Static 

o 

o 

o 

125.0.0.9 

Static 

o 

o 

o 

125.0.0.7 

Static 

o 

o 

o 

125.0.0.6 

Static 

o 

o 

o 

125.123.123.125 

Static 

o 

o 

o 


Address 


0.8 

0 

0 

0 

0 

0 

0 

0 




Type 

Static 


Cursor Down = [Space Bar] Edit Field = [CR] 

Cursor Up = [Backspace] Exit = [X] 


V 


SNMP Trap Client Table 


Screen Path 

Main Menu 
Management 

+ 

Management 
SNMP Trap Client Table 

* 

SNMP Trap Client Table 
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9.2.2 Traps 

A trap, which is the SNMP term for an alarm or event, is unsolicited information from an SNMP 
agent to an SNMP management station. Traps are the only type of unsolicited data that is 
permitted with SNMP. A trap occurs only when a threshold within the agent is violated or when 
a major event occurs. 

The following MIB-II traps also are reported: 

Link Up 
Link Down 
Warm start 
Cold start 
Authentication 
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10. MAINTENANCE 
AND REPAIR 


Start of Document 


10.1 Customer Support 

Osicom Technologies offers a comprehensive range of customer support services, including 
technical assistance and maintenance agreements. 

For technical assistance or detailed information about Osicom's support plans or pricing, call 
1-800-DLX-CARE (1-800-359-2273) to reach a Customer Service Marketing Representative. 
You can also e-mail Osicom’s Customer Support Department at support@osicom.com . 


10.2 Equipment Return and Repair 

Corrective maintenance is limited to the testing and troubleshooting procedures provided in this 
manual. If, after contacting Customer Support, you are unable to correct any malfunction, please 
return the unit to Osicom Technologies for repair. 

Prior to shipping the unit to Osicom Technologies for repair, call Product Repair at 301-317-7400 
and request a Return Goods Authorization (RGA) number. 

You may furnish information on defective units to Osicom Technologies by telephone. Please 
provide the following information: 

• Unit part number and serial number 

• Brief description of failure symptoms and cause 

• Return shipping address (including sender's name) 

• Preference of return shipping mode 

• Invoice address 

• Purchase Order number or letter of authorization for out of warranty units 

• Person to contact for further information. Please include telephone number. 

For the best equipment protection, use the original cartons and packaging material. Send the unit 
to: 

Osicom Technologies, Inc. 

9020 Junction Drive 

Annapolis Junction, Maryland 20701 


IMPORTANT 

RGA number must appear on container! 
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APPENDIX A. 
SPECIFICATIONS 


Start of Document 


Executive Router Specifications 

ITEM 

DESCRIPTION 

Protocol Support 


Routing 

IP (Static, RIP, RIPv2) 

IPX/SPX, (Static, RIP/SAP) 

Bridging 

All popular LAN protocols, transparent brie 

LAN frame types 

Type II, 802.2 (LLC), 802.3 (RAW), SNAP 

WAN 1 frame types 

Frame Relay and PPP 

Interfaces 


LAN 

Ethernet lOBaseT (RJ45) 

WAN 1 

V.35, RS-530, RS-232, or X.21 

Speed 

Up to T1 or El 

Management 


Console 

Asynchronous via RS-232 

Speed (DCE) 

9600 bps (DB25) 

Telnet 

Built-in default IP address (user configurabl 

BootP 

Configuration to Flash 

TFTP (Client) 

Operating system and configuration to Flasl 

SNMP 

Private Enterprise MIB, MIB II, and 

Modem (Optional) 

Encryption MIB (Get, Set, Trap) 

Speed (NI) 

Integral Management Modem 

GUI (Optional) 

V.32 (RJ11) 

Graphical User Interface for Castle Rock 
SNMPc 

Security (Optional) 

Integral DES Encryptor module 

Memory 


4 Mbyte DRAM 

SIMM upgrade to 8 Mbyte 

1 Mbyte Flash-PROM 

Pre-loaded with router OS software 
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RFC Compliance 

768, 791, 792, 793, 826, 854, 855, 862, 

894, 903, 919, 922, 950, 951, 1010, 1058, 
1155, 1157, 1166, 1212, 1213, 1315, 

1332, 1350, 1490, 1542, 1552, 1570, 

1634, 1638, 1661, 1723 

Power 

Standalone 

AC Transformer 

Input: 120 VAC, 60 Hz 

Output: 9 VAC @2.1 amps (max.) 

MiniRack 

AC Transformer 

Input: 120 VAC, 60 Hz 

Output: 10 VAC @ 10 amps (max.) 

DC Power Tray 

Input: -48 VDC @ 6.25 amps (max.) 
Output: 8 to 12 VAC (9.5 nominal) @ 

21.6 amps (max.) 

Dimensions 


Standalone 

1.6" Hx 6.25" Wx 9.6" D 

6-slot rack 

3.5" (2U)Hx 17" Wx 10.5" D 

Weight 


Standalone 

Rack-mount card 

MiniRack w/AC transformer 

MiniRack w/DC power tray 

2.3 lbs. fully-loaded (includes AC transform 

1.4 lbs. (includes front and rear panels) 

7.7 lbs. (empty) 

12 lbs. (empty) 

Operating Temperature 

Storage Temperature 

32° to 104° F; 0° to 40° C 
-40° to 158° F; -40° to 70° C 

Relative Humidity 

0% to 95%, non-condensing 















APPENDIX B. 
INTERFACES AND 
CABLES 


Start of Document 


Console Interface 

PIN 

SIGNAL 

DIRECTION 

2 

Transmit Data 

Input 

3 

Receive Data 

Output 

5 

Clear to Send 

Output 

6 

Data Set Ready 

Output 

7 

Signal Ground 

— 

8 

Carrier Detect 

Output 


& • ########### 

_ 
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WAN 1 Interface 


PIN 

SIGNAL 

1 

Chassis Ground 

2 



Transmit Data 

14 


3 

Receive Data 

16 


4 

19 

Request To Send 

5 

Clear to Send 

13 


6 

Data Set Ready 

22 

7 

Signal Ground 

8 

Data Carrier 

10 

Detect 

9 

Receive Clock 

17 


12 

Transmit Clock 

15 


20 

Data Terminal R 

23 

eady 

25 

Test Mode 


DIRECTION 
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LAN Interface (lOBaseT) 

PIN 

SIGNAL 

1 

Transmit Data (+) 

2 

Transmit Data (-) 

3 

Receive Data (+) 

4 

— 

5 

— 

6 

Receive Data (-) 

7 

— 

8 

— 
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The following cables are available from Osicom Technologies. Illustrations are provided below 
for reference. 



Router Cables 

DESCRIPTION 

PART NUMBER 

ORDER NUMBER 

WAN 1 cable 

V.35 cable 

RS-530 cable (straight-thru) 
RS-530 cable (cross-over) 

115-0614-01 

115-0615-01 

115-0616-01 

CBE06141 (6 ft) 
CBE06151 (6 ft) 
CBE06161 (6 ft) 

DDD line cable (included 
with WAN 2 integral V.32 
dial modem option) 

115-0414-001 

CBE04141 (7 ft) 

















WAN 2 


Cable 115-0414-001 



NOTE: Cable 115-0414-001 is a 6-pin modular 
cable that connects the 8-pin WAN 2 
interface to a 6-pin RJ11 wall jack. Cable 
connectors 3 and 4 connect to WAN 2 
connectors 4 and 5, respectively. 


DDD Line Cable 



APPENDIX C. 
DIAGNOSTICS 


Start of Document 


• C.l LED Test 

• C.2 RAM Test 

• C.3 Flash Test 

• C.4 TFTP Software Download 

• C.5 System Information 


Special-purpose 
diagnostics test certain 
hardware elements of 
the unit. The user can 
also view flash and 
system information. 


NOTE 

Diagnostic screens 
are intended to be 
used for 

manufacturing test 
purposes and error 
recovery when the 
full software image 
will not run. 


r 


ROUTERmate-EX Executive Router Boot Diagnostics 2.x.xx 
Copyright 1996-1997 Osicom Technologies, Inc. 

Press D to run diagnostics 




Diagnostic Menu Prompt 


When the unit is powered up, a prompt appears on the screen, as shown. To enter the 
diagnostics, press D within 3 seconds. The Diagnostic Menu is displayed. 

Type the letter of the desired operation to execute it. 
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When the user boots 
up and does not press 
D, the system verifies 
if the CRC in the 
software matches the 
CRC in the boot 
information database. 

If the CRC matches, 
the unit's software 
runs. If the CRC does 
not match, the 
bootcode will initiate 
BootP and try to 
automatically 
download a copy of 
the operating software 
(OS). If this is 
successful, the 
software will be run. If it fails, the router will reset. 


r 


ROUTERmate-EX Executive Router Diagnostics 

A - LED Test 
B - RAM 
C - Flash Test 
D - TFTP Software Download 
E - System Information 
X - Exit 

Select [A.. E, X]: 

— 

Diagnostic Menu 





C.l LED Test 


The LED test checks 
the operation of the 
TST, ALM, W1,W2, 
and LAN LEDs. The 
LEDs will go ON and 
OLE in sequence for 5 
to 6 seconds. 


r 


ROUTERmate-EX Executive Router Diagnostics 

A - LED Test 
B - RAM 
C - Flash Test 
D - TFTP Software Download 
E - System Information 
X - Exit 


Select [A.. E, X] : A 



TESTING LEDS 



LED Test 
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C.2 RAM Test 


Test A executes a 
minimal verification of 
RAM that 

non-destructively tests 
the read-write 
functions of the RAM. 
The test returns a 
result of Passed or 
Failed. 

Tests B, C, and D 
execute a thorough 
verification of RAM. 
These tests overwrite 
RAM. The user is 
then prompted to press 
a key, after which the 
unit will reboot. 



If the test is successful, the following message appears: 

RAM Test Passed 


If the test fails, the message below appears: 

RAM Test Failed : Address = Oxnnnnnnnn (hex address) 


C.3 Flash Test 


Select A to view 
information about the 
flash memory, as 
shown here. 



Flash Test - Flash Info 
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Select B to remove the 
configuration in flash. 

At the ‘Enter 
password’ prompt, 
enter the console 
password as it was 
configured on the Unit 
menu . The 

configuration flash will 
not be erased unless 
the correct password 
is entered. 

The unit returns to the 
Flash Tests screen. 
When the software is 
run, the unit uses the 
default configuration. 


r 




Flash Tests 


A - Flash Info 

B - Erase Configuration Flash 
X - Exit 

Select [A.. B, X]: B 


Enter password: 


V 


Flash Test - Erase Configuration Flash 


C.4 TFTP Software Download 


When you select TFTP 
Software Download, 
the following screen 
appears. Use this 
option to download 
the router's operating 
software or boot 
software from a 
specified TFTP server 
via the router's FAN 
interface. 


NOTE 

Any changes to the 
fields on the TFTP 
Download screen do 


"I 


Router Code Download 
A - Initiate BOOTP 

B - configure Lan IP Address: 128.1.128.1 
C - Configure Lan IP Subnet Mask: 255.255.255.0 
D - Configure Server Address: 125.0.0.103 
E - Configure Filename: routerplus.txt 
F - Configure Gateway Address: 0.0.0.0 
G - Download Operational Code 
H - Download Boot Code 
I - Lan Frame Type: TYPE II 
X - Exit 

Select [A.,I,X]: 


- ' 

TFTP Software Download 


not change the database in the main operating software. 
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The commands are intended for error recovery when the full software image will not run. The 
user can also upgrade the boot code via this screen. 

Software downloads can only be performed across the LAN because the WAN is not operational 
when running from the boot sector. 


NOTE 

You can download through another router on the local LAN if you configure the LAN address 
of the other router as the Gateway Address. 


When this screen is initially entered, the data displayed will be whatever was configured in the 
database. 

You can configure the LAN IP Address, Subnet Mask, Server Address, Filename, and Gateway 
Address manually or via BootP. If you choose the latter, the new values will be displayed once 
the BootP reply is received. 

Manually configure the LAN type for either TYPE II or SNAP. 

Selecting Initiate BOOTP does not cause the download to start. After you are satisfied that all 
fields are set properly, press [G] to start a download of the operating software or [H] to start a 
download of the boot software. 


C.5 System Information 


Select System 
Information to view 
details of the unit's 
internal software and 
hardware components, 
as shown here. 


NOTE 

The contents of the 
System Information 
screen is an example; 
your screen contents 
will be different. 


System Information: 

MAC address = 00:00:6d:13:57:90 
Boot code version = 2.x.xx 
Software size = 607K 
Software checksum = 0xcf777318 
DB version = 2 
DB size = 76K 

RAM size = 4M 


SIMM: 

WAN 2 : 

Compression: 
V.32 Modem: 
Encryption: 


Installed 
Not Installed 
Not Installed 
Installed 
Not Installed 


Press any key to continue: 




System Information 


If encryption is installed, the version will be displayed. 
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